IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.
PUBLISHED5.2ApplicationCWE-121
IBM Planning Analytics Buffer Overflow
Problem type
Affected products
IBM
Planning Analytics
2.0 - AFFECTED
2.1 - AFFECTED
References
JSON source
https://cveawg.mitre.org/api/cve/CVE-2026-76587Click to expand
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-76587",
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"dateUpdated": "2026-10-20T22:07:47.557Z",
"dateReserved": "2026-08-19T14:24:55.165Z",
"datePublished": "2026-10-20T22:07:47.557Z",
"state": "PUBLISHED"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm",
"dateUpdated": "2026-10-20T22:07:47.557Z"
},
"title": "IBM Planning Analytics Buffer Overflow",
"descriptions": [
{
"lang": "en",
"value": "IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.</p>"
}
]
}
],
"affected": [
{
"vendor": "IBM",
"product": "Planning Analytics",
"cpes": [
"cpe:2.3:a:ibm:planning_analytics:2.0:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "2.0",
"status": "affected"
},
{
"version": "2.1",
"status": "affected"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-121 Stack-based Buffer Overflow",
"cweId": "CWE-121",
"type": "CWE"
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7291604",
"tags": [
"vendor-advisory",
"patch"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH"
}
}
],
"solutions": [
{
"lang": "en",
"value": "It is strongly recommended that you apply the most recent security updates: \n\nAffected Product(s)Version(s)FixIBM Planning Analytics Local2.1.0 - 2.1.23 IBM Planning Analytics Local 2.1.24 is now available for download from Fix Central https://w3.ibm.com/w3publisher/capa-release-announcements/2026-releases/pa-2026-releases \n\n\n\nIBM Planning Analytics Cloud environment has been remediated.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>It is strongly recommended that you apply the most recent security updates: </p><div><table><tbody><tr><td>Affected Product(s)</td><td>Version(s)</td><td>Fix</td></tr><tr><td>IBM Planning Analytics Local</td><td>2.1.0 - 2.1.23</td><td><a href=\"https://w3.ibm.com/w3publisher/capa-release-announcements/2026-releases/pa-2026-releases\" rel=\"nofollow\">IBM Planning Analytics Local 2.1.24 is now available for download from Fix Central</a></td></tr></tbody></table></div><p>IBM Planning Analytics Cloud environment has been remediated.</p>"
}
]
}
]
}
}
}