CVSS 5.4 (medium) · published 2026-10-19
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Affected products (NVD): ibm cloud_pak_system
Fixed in (NVD): 2.3.6.2
Weakness: CWE-80
Source: NVD CVE-2026-4418
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.