vuln-cve/data/2026/96xxx/CVE-2026-96146.json

{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2026-96146",
        "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "state": "PUBLISHED",
        "assignerShortName": "ibm",
        "dateReserved": "2026-09-22T18:37:41.901Z",
        "datePublished": "2026-11-08T19:44:23.101Z",
        "dateUpdated": "2026-11-10T17:53:27.847Z"
    },
    "containers": {
        "cna": {
            "providerMetadata": {
                "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
                "shortName": "ibm",
                "dateUpdated": "2026-11-08T19:44:23.101Z"
            },
            "title": "Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management",
            "problemTypes": [
                {
                    "descriptions": [
                        {
                            "lang": "en",
                            "cweId": "CWE-400",
                            "description": "CWE-400 Uncontrolled Resource Consumption",
                            "type": "CWE"
                        }
                    ]
                }
            ],
            "affected": [
                {
                    "vendor": "IBM",
                    "product": "SevOne Network Performance Management",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "7.0.0",
                            "lessThanOrEqual": "8.2.2",
                            "versionType": "semver"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:ibm:sevone_network_performance_management:7.0.0:*:*:*:*:*:*:*",
                        "cpe:2.3:a:ibm:sevone_network_performance_management:8.2.2:*:*:*:*:*:*:*"
                    ]
                }
            ],
            "descriptions": [
                {
                    "lang": "en",
                    "value": "IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<p>IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.</p>"
                        }
                    ]
                }
            ],
            "references": [
                {
                    "url": "https://www.ibm.com/support/pages/node/7289655",
                    "tags": [
                        "vendor-advisory",
                        "patch"
                    ]
                }
            ],
            "metrics": [
                {
                    "format": "CVSS",
                    "scenarios": [
                        {
                            "lang": "en",
                            "value": "GENERAL"
                        }
                    ],
                    "cvssV3_1": {
                        "version": "3.1",
                        "attackVector": "NETWORK",
                        "attackComplexity": "LOW",
                        "privilegesRequired": "NONE",
                        "userInteraction": "NONE",
                        "scope": "UNCHANGED",
                        "confidentialityImpact": "NONE",
                        "integrityImpact": "NONE",
                        "availabilityImpact": "HIGH",
                        "baseSeverity": "HIGH",
                        "baseScore": 7.5,
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
                    }
                }
            ],
            "solutions": [
                {
                    "lang": "en",
                    "value": "IBM SevOne Network Performance Management has previously remediated the vulnerabilities listed in this bulletin through product maintenance and updates. \n\nThis security bulletin is being published as a historical reference to align with current security disclosure practices and does not contain new findings.\n\n\n\nIBM strongly recommends addressing these vulnerabilities now by upgrading. Please refer to the instructions below for installation steps for your specific version.\n\nProduct(s)\n\nLatest Version(s) \n\nRemediation/Fix/InstructionsIBM SevOne Network Performance Management (DI)8.2.4 Download https://www.ibm.com/support/fixcentral/quickorder  and refer to the  release notes https://www.ibm.com/docs/en/sevone-npm/8.2.0 IBM SevOne Network Performance Management (NMS)8.2.3 Download https://www.ibm.com/support/fixcentral/swg/selectFixes  and refer to the  release notes https://www.ibm.com/docs/en/sevone-npm/8.2.0 IBM SevOne Network Performance Management (SD-WAN)8.2.3 Download https://www.ibm.com/support/fixcentral/swg/selectFixes  and refer to the  release notes https://www.ibm.com/docs/en/sevone-npm/8.2.0",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<div><em><strong>IBM SevOne Network Performance Management has previously remediated the vulnerabilities listed in this bulletin through product maintenance and updates. </strong></em></div><div><em>This security bulletin is being published as a historical reference to align with current security disclosure practices and does not contain new findings.</em></div><div><p>IBM strongly recommends addressing these vulnerabilities now by upgrading. Please refer to the instructions below for installation steps for your specific version.</p><figure><div><table><tbody><tr><td>Product(s)</td><td><p>Latest Version(s) </p></td><td>Remediation/Fix/Instructions</td></tr><tr><td>IBM SevOne Network Performance Management (DI)</td><td>8.2.4</td><td><a href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FOther+software%2FIBM+SevOne+Network+Performance+Management&amp;fixids=8.2.0-IBM-SevOne-DI_8.2.4&amp;source=SAR\" rel=\"noopener noreferrer nofollow\">Download</a> and refer to the <a href=\"https://www.ibm.com/docs/en/sevone-npm/8.2.0?topic=insight-data-82-release-notes\" rel=\"nofollow\">release notes</a></td></tr><tr><td>IBM SevOne Network Performance Management (NMS)</td><td>8.2.3</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+SevOne+Network+Performance+Management&amp;fixids=8.2.0-IBM-SevOne-NMS_8.2.3&amp;source=dbluesearch&amp;function=fixId&amp;parent=ibm/Other%20software\" rel=\"noopener noreferrer nofollow\">Download</a> and refer to the <a href=\"https://www.ibm.com/docs/en/sevone-npm/8.2.0?topic=nms-82-release-notes\" rel=\"noopener noreferrer nofollow\">release notes</a></td></tr><tr><td>IBM SevOne Network Performance Management (SD-WAN)</td><td>8.2.3</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+SevOne+Network+Performance+Management&amp;fixids=8.2.0-IBM-SevOne-SDWAN_8.2.3&amp;source=SAR&amp;function=fixId&amp;parent=ibm/Other%20software\" rel=\"noopener noreferrer nofollow\">Download</a> and refer to the <a href=\"https://www.ibm.com/docs/en/sevone-npm/8.2.0?topic=wan-sd-82-release-notes\" rel=\"noopener noreferrer nofollow\">release notes</a></td></tr></tbody></table></div></figure></div>"
                        }
                    ]
                }
            ]
        },
        "adp": [
            {
                "metrics": [
                    {
                        "other": {
                            "type": "ssvc",
                            "content": {
                                "timestamp": "2026-11-10T16:29:42.473933Z",
                                "id": "CVE-2026-96146",
                                "options": [
                                    {
                                        "Exploitation": "none"
                                    },
                                    {
                                        "Automatable": "yes"
                                    },
                                    {
                                        "Technical Impact": "partial"
                                    }
                                ],
                                "role": "CISA Coordinator",
                                "version": "2.0.3"
                            }
                        }
                    }
                ],
                "title": "CISA ADP Vulnrichment",
                "providerMetadata": {
                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
                    "shortName": "CISA-ADP",
                    "dateUpdated": "2026-11-10T17:53:27.847Z"
                }
            }
        ]
    }
}