IBM Planning Analytics Vulnerabilities Allow DoS, Info Disclosure

CERT-Bund has released a security advisory (WID-SEC-2026-0759) concerning multiple vulnerabilities in IBM Planning Analytics, affecting versions prior to 2.1.18 on Linux, UNIX, and Windows operating systems. The vulnerabilities have a CVSS base score of 7.5 (high) and a temporal score of 6.7 (medium), allowing remote attackers to perform denial of service attacks, disclose information, and bypass security controls.

Organizations using IBM Planning Analytics should immediately review their installed versions and apply available mitigations or updates to address these security risks. Failure to do so could result in significant operational disruption and sensitive data exposure. The advisory indicates that mitigation is available, and users are advised to consult the provided links for specific details and affected product versions.