CVE-2026-7365

Published: May 27, 2026Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

IBM Operations Analytics - Log Analysis and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.

Affected (16)

Products: Ibm: Operations Analytics Log Analysis

Ibm

1 product

Operations Analytics Log Analysis

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Ibm Operations Analytics Log Analysis	Version 1.3.2.0
Ibm Operations Analytics Log Analysis	Version 1.3.3.0
Ibm Operations Analytics Log Analysis	Version 1.3.5.0
Ibm Operations Analytics Log Analysis	Version 1.3.5.1
Ibm Operations Analytics Log Analysis	Version 1.3.5.2
Ibm Operations Analytics Log Analysis	Version 1.3.5.3
Ibm Operations Analytics Log Analysis	Version 1.3.6.0
Ibm Operations Analytics Log Analysis	Version 1.3.6.1
Ibm Operations Analytics Log Analysis	Version 1.3.7.0
Ibm Operations Analytics Log Analysis	Version 1.3.7.1
Ibm Operations Analytics Log Analysis	Version 1.3.7.2
Ibm Operations Analytics Log Analysis	Version 1.3.8.0
Ibm Operations Analytics Log Analysis	Version 1.3.8.1
Ibm Operations Analytics Log Analysis	Version 1.3.8.2
Ibm Operations Analytics Log Analysis	Version 1.3.8.3
Ibm Operations Analytics Log Analysis	Version 1.3.8.4

Related CWEs

CWE-1392

Use of Default Credentials

The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

References (1)

https://www.ibm.com/support/pages/node/7272268

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.