CVE-2026-2477

Vendor

IBM

Product

watsonx Orchestrate Cartridge for Cloud Pak for Data

CVSS v3.1

6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness

CWE-862

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 23
   CVE NVD 3h ago

   IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 fails to enforce backend authorization checks…

   IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 fails to enforce backend authorization checks, allowing low‑privileged users to directly invoke administrative API endpoints.…

   CVSS 6.5 CVE-2026-2477 IBM