How do I check whether I am affected by CVE-2026-76587?

Self-hosted Planning Analytics Local only: check the installed version in Planning Analytics Workspace (Help > About) or your install manifest. 2.1.23 or lower is vulnerable. Cloud customers need do nothing.

What is the fix for CVE-2026-76587?

Upgrade Planning Analytics Local to 2.1.24 (download from IBM Fix Central). Until then, limit network access to the Planning Analytics servers and review which accounts hold logins.

Who is not affected by CVE-2026-76587?

Not affected if: auth-required, managed-hosting.

Live › vulnerability › CVE-2026-76587

Go to dashboard

high8.8Other

IBM Planning Analytics: stack buffer overflow lets attacker run code

Stack-based buffer overflow (CWE-121) in IBM Planning Analytics 2.0 and 2.1, CVSS 8.8 (AV:N/AC:L/PR:L/UI:N). A low-privileged authenticated network attacker can run arbitrary code on the server. IBM fixed it in Planning Analytics Local 2.1.24 (Workspace component bulletin). Planning Analytics Cloud was already remediated by IBM. No known exploitation or public PoC found.

Summary written from the sources below. Check the originals before acting.

CVSS 3.x

8.8

high

scored by [email protected]

known so far5 of 6

missing: exploitation

First public: Oct 20, 2026 UTC
Last modified: Oct 24, 2026
Status: open
Known exploitation: None reported
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: No reports yet.
Needs login: Not known from the sources.
Needs a special setup: Not known from the sources.
Reachable from: Not known from the sources.
Worst case: Attacker runs arbitrary code on the Planning Analytics server.
CVSS said: 8.8. The facts above say medium; we keep the sources' high until an analyst looks.

Who is affected

1 product

Know the next one before it finds you.

Add to Slack

Live › vulnerability › CVE-2026-76587

Go to dashboard

high8.8Other

IBM Planning Analytics: stack buffer overflow lets attacker run code

Summary written from the sources below. Check the originals before acting.

CVSS 3.x

8.8

high

scored by [email protected]

known so far5 of 6

missing: exploitation

First public: Oct 20, 2026 UTC
Last modified: Oct 24, 2026
Status: open
Known exploitation: None reported
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: No reports yet.
Needs login: Not known from the sources.
Needs a special setup: Not known from the sources.
Reachable from: Not known from the sources.
Worst case: Attacker runs arbitrary code on the Planning Analytics server.
CVSS said: 8.8. The facts above say medium; we keep the sources' high until an analyst looks.

Who is affected

1 product

Know the next one before it finds you.

Add to Slack

IBM Planning Analytics: stack buffer overflow lets attacker run code

Why it is high, and not just CVSS

Who is affected

Know the next one before it finds you.

IBM Planning Analytics: stack buffer overflow lets attacker run code

Why it is high, and not just CVSS

Who is affected

Know the next one before it finds you.

How to check

The fix

Who had it, and when

What the sources say, verbatim

Sources