{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-95867", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-09-22T17:02:58.971Z", "datePublished": "2026-11-08T19:44:13.593Z", "dateUpdated": "2026-11-08T19:44:13.593Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-11-08T19:44:13.593Z"}, "title": "Multiple vulnerabilities previously addressed in IBM SevOne Network Performance Management", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "SevOne Network Performance Management", "versions": [{"status": "affected", "version": "7.0.0", "lessThanOrEqual": "8.2.2", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:sevone_network_performance_management:7.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sevone_network_performance_management:8.2.2:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7289655", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 6.7, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "IBM SevOne Network Performance Management has previously remediated the vulnerabilities listed in this bulletin through product maintenance and updates.\u00a0\n\nThis security bulletin is being published as a historical reference to align with current security disclosure practices and does not contain new findings.\n\n\n\nIBM strongly recommends addressing these vulnerabilities now by upgrading. Please refer to the instructions below for installation steps for your specific version.\n\nProduct(s)\n\nLatest Version(s)\u00a0\n\nRemediation/Fix/InstructionsIBM SevOne Network Performance Management (DI)8.2.4 Download https://www.ibm.com/support/fixcentral/quickorder and refer to the release notes https://www.ibm.com/docs/en/sevone-npm/8.2.0 IBM SevOne Network Performance Management (NMS)8.2.3 Download https://www.ibm.com/support/fixcentral/swg/selectFixes and refer to the release notes https://www.ibm.com/docs/en/sevone-npm/8.2.0 IBM SevOne Network Performance Management (SD-WAN)8.2.3 Download https://www.ibm.com/support/fixcentral/swg/selectFixes and refer to the release notes https://www.ibm.com/docs/en/sevone-npm/8.2.0", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><em><strong>IBM SevOne Network Performance Management has previously remediated the vulnerabilities listed in this bulletin through product maintenance and updates.\u00a0</strong></em></div><div><em>This security bulletin is being published as a historical reference to align with current security disclosure practices and does not contain new findings.</em></div><div><p>IBM strongly recommends addressing these vulnerabilities now by upgrading. Please refer to the instructions below for installation steps for your specific version.</p><figure><div><table><tbody><tr><td>Product(s)</td><td><p>Latest Version(s)\u00a0</p></td><td>Remediation/Fix/Instructions</td></tr><tr><td>IBM SevOne Network Performance Management (DI)</td><td>8.2.4</td><td><a href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FOther+software%2FIBM+SevOne+Network+Performance+Management&amp;fixids=8.2.0-IBM-SevOne-DI_8.2.4&amp;source=SAR\" rel=\"noopener noreferrer nofollow\">Download</a> and refer to the <a href=\"https://www.ibm.com/docs/en/sevone-npm/8.2.0?topic=insight-data-82-release-notes\" rel=\"nofollow\">release notes</a></td></tr><tr><td>IBM SevOne Network Performance Management (NMS)</td><td>8.2.3</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+SevOne+Network+Performance+Management&amp;fixids=8.2.0-IBM-SevOne-NMS_8.2.3&amp;source=dbluesearch&amp;function=fixId&amp;parent=ibm/Other%20software\" rel=\"noopener noreferrer nofollow\">Download</a> and refer to the <a href=\"https://www.ibm.com/docs/en/sevone-npm/8.2.0?topic=nms-82-release-notes\" rel=\"noopener noreferrer nofollow\">release notes</a></td></tr><tr><td>IBM SevOne Network Performance Management (SD-WAN)</td><td>8.2.3</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+SevOne+Network+Performance+Management&amp;fixids=8.2.0-IBM-SevOne-SDWAN_8.2.3&amp;source=SAR&amp;function=fixId&amp;parent=ibm/Other%20software\" rel=\"noopener noreferrer nofollow\">Download</a> and refer to the <a href=\"https://www.ibm.com/docs/en/sevone-npm/8.2.0?topic=wan-sd-82-release-notes\" rel=\"noopener noreferrer nofollow\">release notes</a></td></tr></tbody></table></div></figure></div>"}]}]}}}

{}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:sevone_network_performance_management:7.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sevone_network_performance_management:8.2.2:*:*:*:*:*:*:*"], "product": "SevOne Network Performance Management", "vendor": "IBM", "versions": [{"lessThanOrEqual": "8.2.2", "status": "affected", "version": "7.0.0", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow."}], "id": "CVE-2026-95867", "lastModified": "2026-11-08T20:17:25.143", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "psirt@us.ibm.com", "type": "Primary"}]}, "published": "2026-11-08T20:17:25.020", "references": [{"source": "psirt@us.ibm.com", "url": "https://www.ibm.com/support/pages/node/7289655"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-121"}], "source": "psirt@us.ibm.com", "type": "Primary"}]}

{}

{}