{"id":"CVE-2026-19543","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-19543","generatedAt":"2026-10-28T03:39:56.836Z","title":"An attacker can modify requests to bypass validation controls and submit unauthorized values, potentially resulting in unintended application behavior.","description":"IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit unauthorized values, potentially resulting in unintended application behavior.","published":"2026-09-14T19:17:17.000Z","lastModified":"2026-09-16T19:22:23.000Z","status":"Awaiting Analysis","sourceIdentifier":"psirt@us.ibm.com","cvss":{"version":"3.1","score":6.2,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-20"],"affected":[],"epss":{"score":0.00172,"percentile":0.06545,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7286490","source":"psirt@us.ibm.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-19543","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}