CVE-2026-9610

Published: Jun 22, 2026Modified: Jun 26, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is accessible by directly requesting the URL, bypassing intended access controls.

Affected (6)

Products: Ibm: Datacap, Datacap Navigator

Ibm

2 products

Datacap

Datacap Navigator

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Datacap	Version 9.1.7
Ibm Datacap	Version 9.1.8
Ibm Datacap	Version 9.1.9
Ibm Datacap Navigator	Version 9.1.7
Ibm Datacap Navigator	Version 9.1.8
Ibm Datacap Navigator	Version 9.1.9

Related CWEs

CWE-425

Direct Request ('Forced Browsing')

The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

References (1)

https://www.ibm.com/support/pages/node/7276609

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.