Log in Start free

Vulnerability · Published May 27, 2026 · Assigned by ibm

CVE-2026-7365IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation

High 8.4

In plain English

A high-severity security flaw in Operations Analytics - Log Analysis from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).

Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.1%top 98.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

IBM Operations Analytics - Log Analysis  and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.

Affected products (as reported)

VendorProductVersions
IBM Operations Analytics - Log Analysis 1.3.2.01.3.3.01.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.31.3.6.0, 1.3.6.11.3.7.0, 1.3.7.1, 1.3.7.21.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4

Weakness: CWE-1392 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References