CVE-2026-9610

Multiple Vulnerabilities in IBM Datacap

State: Published
Severity: 2.3 Low
Published: Jun 22, 2026
Updated: Jun 22, 2026
Reserved: May 26, 2026

Description

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is accessible by directly requesting the URL, bypassing intended access controls.

Scores

CVSS	Score	Vector	Source
3.1	2.3 Low	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N	ibm

Weaknesses

CWE-425 Direct Request ('Forced Browsing')

Affected Products

Product	Versions
DatacapIBM	9.1.7 through 1.8.4Affected 9.1.8Affected 9.1.9Affected
Datacap NavigatorIBM	9.1.7 through 8.2.1.0Affected 9.1.8Affected 9.1.9Affected

References

https://www.ibm.com/support/pages/node/7276609vendor-advisorypatch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.