CVE-2026-95867 · Vendor
NO FIX YET
IBM SevOne Network Performance Management versions 7.0.0 through 8.2.2 contain a buffer overflow. A local attacker with access to the machine can use it to execute arbitrary code.
first public Nov 8, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running IBM SevOne Network Performance Management in the affected range 7.0.0 through 8.2.2. The sources describe a local attacker, so exposure depends on who can log in to or run code on the SevOne host. unknown for anything beyond that.
Not affected if version-outside-range
Who cares ibm-sevone, network-monitoring
No fix yet, per the sources.
IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.