CRITICAL 9.1 NVD

CVE-2026-19646

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitr

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to improper validation of the HTTP Host header.

References

Published: 2026-09-10 · Source: NVD · Feed updated: 2026-09-11
This critical severity vulnerability with a CVSS score of 9.1 was published on 2026-09-10 via NVD.

Risk Timeline

CVE Disclosed2026-09-10 · 0 days ago

Remediation Resources

Analysis & PoC
www.ibm.com/support/pages/node/7286490
vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.