CVE-2026-10025

9.8 Critique

Publiée le 05/08/2026 à 18:16 · Modifiée le 23/10/2026 à 23:10 · Analysée par le NVD · Source : psirt@us.ibm.com

Description

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE) injection vulnerability. The vulnerability resides in the parseXmlPayload() function within the event processing pipeline ( q1labs_core.jar ). When at least one log source type is configured to use XML-format property autodetection, the system processes XML-formatted syslog events sent to port 514 (UDP/TCP) without authentication.

Traduire en français

Produits concernés

IBM QRadar
Ibm qradar security information and event manager

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.2 Élevée	psirt@us.ibm.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L`
3.1	9.8 Critique	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-611

Références

https://www.ibm.com/support/pages/node/7282394 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories