Vulnerability record/PUBLISHED/Published Nov 8, 2026 16:50:58 UTC

CVE-2026-105473

IBM QRadar 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 is vulnerable to Open Redirect. A victim must open a specifically crafted URL while authenticated to QRadar to trigger this.

Base score4.6/ 10

SeverityMediumCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityMedium

Attack vectorNetworkAV

Attack complexityLowAC

Privileges requiredLowPR

User interactionRequiredUI

ScopeUnchangedS

Confidentiality impactLowC

Integrity impactLowI

Availability impactNoneA

CVSS vector stringCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityibm

Last updatedNov 9, 2026 20:01:39 UTC

PublishedNov 8, 2026 16:50:58 UTC

ReservedOct 5, 2026 14:58:31 UTC