CVE-2026-9610
Low · 2.3CVSS
2.3
EPSS
0.3%
Published
Jun 22, 2026
CISA due date
—
The record
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is accessible by directly requesting the URL, bypassing intended access controls.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-14953 A low-privileged remote attacker can enumerate all configured users and identify which… CWE-425
- CVE-2026-76799 A weakness has been identified in code-projects Login Registration System 1.0. CWE-425
- CVE-2026-19903 A vulnerability has been found in SourceCodester Online Clothing Store 1.0. CWE-425
- CVE-2026-21760 HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced… CWE-425
- CVE-2026-10521 An high privileged remote attacker can access a hidden configuration method, that should… CWE-425
- CVE-2026-34028 The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes… CWE-425
- CVE-2026-11986 A flaw was found in the admin-ui-ext component of Keycloak, which provides extended… CWE-425
- CVE-2026-8205 Concrete CMS 9.5.0 and below is vulnerable to authorization bypass in the Calendar Block… CWE-425