IBM DevOps Plan

• CVE-2026-4096 Medium 6.5 A vulnerability has been identified in IBM DevOps Plan that allows a Host Header Injection attack due to improper handling of the Host header in HTTP requests. 0.1%
• CVE-2025-36363 Medium 5.9 IBM DevOps Plan is vulnerable to Excessive Authentication Attempts 0.3%
• CVE-2025-36364 Medium 6.2 IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters. 0.1%