CVE-2026-1726 — MEDIUM (4.8)

Vulnerability Description

IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 enables privilege escalation, allowing unauthorized users to perform administrative operations after being demoted. Attackers could access sensitive data, modify system configurations, or change permissions for other users. The issue undermines administrative controls and could lead to data breaches, system compromise, and loss of trust in the application's security mechanisms.

CVSS Score

4.8

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Ibm	Guardium Key Lifecycle Manager	4.1.0

Related Weaknesses (CWE)

CWE-269

References

https://www.ibm.com/support/pages/node/7268697PatchVendor Advisory

FAQ

What is CVE-2026-1726?

CVE-2026-1726 is a vulnerability with a CVSS score of 4.8 (MEDIUM). IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 enables privilege escalation, allowing unauthorized users to perform administrative operations after being demoted. Attackers co...

How severe is CVE-2026-1726?

CVE-2026-1726 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-1726?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Guardium Key Lifecycle Manager.