Log in Start free

Vulnerability · Published Jul 17, 2026 · Assigned by ibm

CVE-2026-13473IBM Storage Protect Client is vulnerable to Heap-Based Buffer Overflow

High 8.1

In plain English

A high-severity heap buffer overflow in Storage Protect Client from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.7%top 47.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Storage Protect is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.

Affected products (as reported)

VendorProductVersions
IBM Storage Protect Client 8.1.0.0 – through 8.1.27.0, 8.1.27.18.2.0.0 – through 8.2.1.0

Weakness: CWE-122 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References