{"id":"CVE-2026-93442","kind":"vulnerability","aliases":["CVE-2026-93442"],"related":[],"title":"IBM QRadar SIEM: out-of-bounds read enables denial of service or data leak","description":"IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.","summary":"IBM QRadar SIEM versions 7.6.0.0 through 7.6.0.4 and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 contain an out-of-bounds read flaw. A remote attacker can crash the service or obtain sensitive information.","severity":"high","cvss":8.2,"epss":0.00303,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ibm-qradar","infrastructure","on-prem","siem"],"not_affected_if":["other-versions"],"how_to_check":"- Check the installed QRadar version in the admin console or with the vendor's version command, and compare it against the affected ranges\n- unknown","fix":"- Move QRadar SIEM to a fixed release from IBM's security bulletin for this CVE; the fixed version is unknown from the sources\n- unknown","status":"open","published_at":"2026-10-20T22:21:07+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","triaged_at":"2026-10-25T03:03:54+00:00","updated_at":"2026-10-25T03:03:54+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T03:03:54Z","model":"claude-haiku-5-5","output":{"fix":"- Move QRadar SIEM to a fixed release from IBM's security bulletin for this CVE; the fixed version is unknown from the sources\n- unknown","reach":"network","title":"IBM QRadar SIEM: out-of-bounds read enables denial of service or data leak","impact":"medium","summary":"IBM QRadar SIEM versions 7.6.0.0 through 7.6.0.4 and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 contain an out-of-bounds read flaw. A remote attacker can crash the service or obtain sensitive information.","category":"infrastructure","nicknames":[],"who_cares":["ibm-qradar","siem","on-prem"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Service crashes or sensitive memory contents are disclosed remotely","analyst_note":"Find IBM's security bulletin for CVE-2026-93442 to confirm the fixed version, the triggering feature and whether authentication is required.","how_to_check":"- Check the installed QRadar version in the admin console or with the vendor's version command, and compare it against the affected ranges\n- unknown","needs_analyst":true,"not_affected_if":["other-versions"],"who_is_affected":"Teams running IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, or 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001, are exposed. The sources do not say which features or network paths trigger the flaw, so the exposed surface is unknown. Teams on other QRadar versions can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000637,"input_tokens":3386,"output_tokens":596,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':17A,20A '-93442':18A,21A '001':46B,81C '16':43B,78C '7.5.0':38B,40B,73C,75C '7.6.0.0':34B,69C '7.6.0.4':36B,71C 'allow':83C 'attack':57B,86C 'bound':7A,52B,103C 'caus':88C 'contain':47B 'could':82C 'crash':59B 'cve':16A,19A 'data':14A 'denial':10A,90C 'due':97C 'enabl':9A 'fix':45B,80C 'flaw':54B 'ibm':1A,23B,30B,66C 'ibm-qradar':22B 'inform':65B,96C 'infrastructur':25B 'interim':44B,79C 'leak':15A 'obtain':63B,94C 'on-prem':26B 'out-of-bound':4A,49B,100C 'packag':42B,77C 'prem':28B 'qradar':2A,24B,31B,67C 'read':8A,53B,104C 'remot':56B,85C 'sensit':64B,95C 'servic':12A,61B,92C 'siem':3A,29B,32B,68C 'updat':41B,76C 'version':33B","nicknames":[],"mitigations":[],"who_affected":"Teams running IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, or 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001, are exposed. The sources do not say which features or network paths trigger the flaw, so the exposed surface is unknown. Teams on other QRadar versions can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:21:07+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-93442","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93442","severity":null,"published_at":"2026-10-20T22:21:07+00:00","modified_at":"2026-10-21T16:17:41+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-93442","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-93442","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:55+00:00","fetched_at":"2026-10-24T13:15:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}