CVE-2026-91868 · Vendor
NO FIX YET
IBM Security QRadar EDR versions 3.12 through 3.12.26 have an improper access control flaw. A remote attacker with a valid account can obtain sensitive information they should not see.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Organizations running IBM Security QRadar EDR in the 3.12 through 3.12.26 range. Exposure requires an authenticated account on the product; sources do not describe other configuration requirements.
Not affected if outside-affected-range
Who cares edr, ibm, qradar-edr
No fix yet, per the sources.
IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to obtain sensitive information due to improper access control.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.