PatchTheCVEplanning analytics vulnerabilities and fixes
Recent CVEs affecting planning analytics, with upgrade or downgrade steps. 7 tracked.
Also searched as: planninganalytics.
planning analytics has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-10-12. Highest priority: CVE-2026-19627 (score 41/100).
- CVE-2026-19627 HIGH 8.2 DOWNGRADE IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite c
- CVE-2026-75061 HIGH 7.5 DOWNGRADE IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system
- CVE-2026-75063 MEDIUM 5.4 DOWNGRADE IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScrip
- CVE-2026-17475 HIGH 7.1 DOWNGRADE IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applicat
- CVE-2026-18541 MEDIUM 6.4 DOWNGRADE IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting
- CVE-2026-19620 HIGH 8.8 DOWNGRADE IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access d
- CVE-2026-19622 HIGH 8.8 DOWNGRADE IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privil
FAQ
How do I fix planning analytics vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is planning analytics being exploited right now?
None of the tracked planning analytics CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which planning analytics CVE should I patch first?
CVE-2026-19627 currently ranks highest (41/100): IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite c.