CVE-2026-10025

Published: Aug 5, 2026Modified: Aug 10, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE) injection vulnerability. The vulnerability resides in the parseXmlPayload() function within the event processing pipeline ( q1labs_core.jar ). When at least one log source type is configured to use XML-format property autodetection, the system processes XML-formatted syslog events sent to port 514 (UDP/TCP) without authentication.

Affected (26)

Products: Ibm: Qradar Security Information And Event Manager

Ibm

1 product

Qradar Security Information And Event Manager

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Security Information And Event Manager	Version 7.5.0
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_10
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_11
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_12
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_13
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_13_interim_fix_01
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_13_interim_fix_02
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_14
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_14_interim_fix_01
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_14_interim_fix_02
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_15
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_15_interim_fix_01
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_15_interim_fix_02
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_15_interim_fix_03
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_15_interim_fix_04
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_1
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_2
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_3
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_4
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_5
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_6
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_7
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_8
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_9
Ibm Qradar Security Information And Event Manager	Version 7.6.0
Ibm Qradar Security Information And Event Manager	Version 7.6.0 fix_pack_1

Related CWEs

CWE-611

Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (1)

https://www.ibm.com/support/pages/node/7282394

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.