CVE-2026-7365
Full vulnerability record from the local CVENow database.
Description
IBM Operations Analytics - Log Analysis and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.
Severity
HIGH
CVSS score
7.8
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-05-27 14:17:35.280000
Last modified
2026-10-26 11:10:00.157000
View original CVE JSON
{
"id": "CVE-2026-7365",
"sourceIdentifier": "[email protected]",
"published": "2026-05-27T14:17:35.280",
"lastModified": "2026-10-26T11:10:00.157",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM Operations Analytics - Log Analysis and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication."
},
{
"lang": "es",
"value": "IBM Operations Analytics - Log Analysis e IBM SmartCloud Analytics - Log Analysis utilizan contraseñas predeterminadas contraseñas predeterminadas del proceso de fabricación para su uso durante el proceso de instalación, lo que podría permitir a un atacante eludir la autenticación."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "IBM",
"product": "Operations Analytics - Log Analysis",
"cpes": [
"cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.3.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.5.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.6.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.7.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.8.0:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "1.3.2.0",
"status": "affected"
},
{
"version": "1.3.3.0",
"status": "affected"
},
{
"version": "1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3",
"status": "affected"
},
{
"version": "1.3.6.0, 1.3.6.1",
"status": "affected"
},
{
"version": "1.3.7.0, 1.3.7.1, 1.3.7.2",
"status": "affected"
},
{
"version": "1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.5,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-05-27T14:51:48.386177Z",
"id": "CVE-2026-7365",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1392"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "43CCEBFA-728D-4201-8593-FE5C7CE53277"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6D5294D7-1BFB-4B62-8515-CAA26C590FCA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B72AC758-E3A0-4746-ADC6-CDB1D3A4FCBB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5372705B-6A20-4AF8-9672-FC9F1816EB22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "DF6B60C6-724F-454E-A1AC-9AAD500682E9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.3:*:*:*:*:*:*:*",
"matchCriteriaId": "7B5CAF78-5D22-4EF8-B0EC-29B7259512E3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F748C8F7-B421-4827-8476-EDFB25CBBDE4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1AF78185-2481-4AC0-A093-13921FE82280"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "624CA7BB-7D7B-4945-B077-A3035F955F58"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A012A4A3-59C0-46C0-A3C1-0F6886066023"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "7B43090E-FDAF-4B45-8C07-AF87CFFB929C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "60642398-461C-4868-A801-EFB689ACDEA0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "487A6CCB-060B-495A-B501-560DFF8E7D41"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.2:*:*:*:*:*:*:*",
"matchCriteriaId": "EEF4D476-A6E7-4626-BA85-A54816FF6C6E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.3:*:*:*:*:*:*:*",
"matchCriteriaId": "E092DA77-76EA-4936-AEC8-2D847FAA415E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.4:*:*:*:*:*:*:*",
"matchCriteriaId": "9BA61279-8EC7-4482-8522-1B3591C4EBB2"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7272268",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}