Changeflow GovPing Data Privacy & Cybersecurity Multiples vulnérabilités dans IBM QRadar - Avis...
Priority review Guidance Added Final

Multiples vulnérabilités dans IBM QRadar - Avis CERT-FR-2026-AVI-0455

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR issued advisory CERTFR-2026-AVI-0455 disclosing multiple vulnerabilities in IBM QRadar SOAR Plugin version 5.3.1 prior to 5.6.4. The vulnerabilities (CVE-2025-66418, CVE-2025-66471, CVE-2026-21441) allow remote attackers to cause denial of service. Organizations using affected versions should apply patches per IBM security bulletins 7269734 and 7269736.

Published by CERT-FR on cert.ssi.gouv.fr . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .
View original document View source feed page

What changed

CERT-FR published security advisory CERTFR-2026-AVI-0455 disclosing three vulnerabilities in IBM QRadar SOAR Plugin App version 5.3.1 prior to 5.6.4. The vulnerabilities enable remote denial of service attacks. Referenced CVEs include CVE-2025-66418, CVE-2025-66471, and CVE-2026-21441.

Organizations running affected versions of IBM QRadar should review IBM security bulletins 7269734 and 7269736 for patch availability. Security teams should assess exposure, apply vendor-provided updates to version 5.6.4 or later, and monitor for indicators of compromise. Failure to patch leaves systems vulnerable to remote DoS exploitation.

Archived snapshot

Apr 17, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 17 avril 2026 N° CERTFR-2026-AVI-0455 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans IBM QRadar

Gestion du document

| Référence | CERTFR-2026-AVI-0455 |
| Titre | Multiples vulnérabilités dans IBM QRadar |
| Date de la première version | 17 avril 2026 |
| Date de la dernière version | 17 avril 2026 |
| Source(s) | Bulletin de sécurité IBM 7269734 du 16 avril 2026
Bulletin de sécurité IBM 7269736 du 16 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risque

  • Déni de service à distance

Systèmes affectés

  • SOAR QRadar Plugin App version 5.3.1 antérieure à 5.6.4

Résumé

De multiples vulnérabilités ont été découvertes dans IBM QRadar. Elles permettent à un attaquant de provoquer un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 17 avril 2026 Version initiale

Related changes

Favicon for www.cert.ssi.gouv.fr Multiples vulnérabilités dans OpenSSL - Avis CERT-FR 2026-AVI-0403
Priority review Apr 08, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiples vulnérabilités dans les produits Splunk, risque d'exécution de code arbitraire
Priority review Apr 16, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiples vulnérabilités dans le noyau Linux de SUSE - CERTFR-2026-AVI-0454
Routine Apr 17, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-FR
Published
April 17th, 2026
Instrument
Guidance
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0455

Who this affects

Applies to
Technology companies Government agencies
Industry sector
5112 Software & Technology
Activity scope
Software vulnerability management Patch management Security monitoring
Threshold
SOAR QRadar Plugin App version 5.3.1 antérieure à 5.6.4
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Information Security Software & Technology

Browse Categories

Agriculture & Food Safety 65 AI Regulation 3 Banking & Finance 332 Consumer Protection 63 Courts & Legal 361 Data Privacy & Cybersecurity 77 Defense & National Security 51 Education 44 Energy 100 Environment 86 Environmental & Energy 36 Environmental Regulation 7 Financial Regulation 2 Government & Legislation 278 Government Operations 107 Healthcare 136 Healthcare Compliance 6 Healthcare & Life Sciences 72 Housing 16 Immigration 8 Immigration & Border Control 2 Insurance 66 Labor & Employment 126 Legal & Judicial 29 Pharma & Drug Safety 101 Pharma & Healthcare 1 Privacy 1 Public Health 2 Real Estate & Housing 61 Sanctions & Export Controls 1 Securities & Investments 28 Securities & Markets 103 Securities Regulation 6 Tax 64 Tax & Revenue 9 Telecom & Technology 47 Trade & Commerce 3 Trade & Sanctions 135 Transportation 85

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!