CVE-2026-9764

CVSS 8.8 (high) ยท published 2026-11-08

IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.

Weakness: CWE-94

Source: NVD CVE-2026-9764

References

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.