CVE-2026-10025
IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability
CVSS Score
8.2
EPSS Score
0.0%
EPSS Percentile
0th
IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE) injection vulnerability. The vulnerability resides in the parseXmlPayload() function within the event processing pipeline ( q1labs_core.jar ). When at least one log source type is configured to use XML-format property autodetection, the system processes XML-formatted syslog events sent to port 514 (UDP/TCP) without authentication.
| CWE | CWE-611 |
| Vendor | ibm |
| Product | qradar |
| Published | Aug 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for ibm qradar
Be the first to know when new high vulnerabilities affecting ibm qradar are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
Low
Affected Versions
IBM / QRadar
7.6.0.0 ≤ 7.6.0.1 7.5.0 ≤ 7.5.0 UP 15 Interim Fix 005