CVE-2026-8636

Published: Jun 22, 2026Modified: Jun 26, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker can use the same keys to decrypt password, gain access to the application and access sensitive data in the database.

Affected (6)

Products: Ibm: Datacap, Datacap Navigator

Ibm

2 products

Datacap

Datacap Navigator

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Datacap	Version 9.1.7
Ibm Datacap	Version 9.1.8
Ibm Datacap	Version 9.1.9
Ibm Datacap Navigator	Version 9.1.7
Ibm Datacap Navigator	Version 9.1.8
Ibm Datacap Navigator	Version 9.1.9

Related CWEs

CWE-316

Cleartext Storage of Sensitive Information in Memory

The product stores sensitive information in cleartext in memory.

References (1)

https://www.ibm.com/support/pages/node/7276609

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.