CVE-2026-19543
Last modified
CVE-2026-19543 is a medium-severity vulnerability rated 6.2/10 on the CVSS scale. IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit unauthorized values, potentially resulting in unintended application behavior.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit unauthorized values, potentially resulting in unintended application behavior.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| IBM | Common Licensing | Agent 9.0; Agent 9.0.0.1; Agent 9.0.0.2; ART 9.0; ART 9.0.0.1; ART 9.0.0.2 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-19543?
How severe is CVE-2026-19543?
How do I fix CVE-2026-19543?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-1953Nukegraphic CMS v3.1.2 contains a stored cross-site scriptin…8.2
- CVE-2026-19534undici's WebSocket client crashes the whole Node.js process …7.5
- CVE-2026-19535Nozomi Networks Labs identified a CWE-352: Cross-Site Reques…8.6
- CVE-2026-19538The BLOCKED access control list items that are evaluated to …7.5
- CVE-2026-19539Authorization Bypass Through User-Controlled Key in the tick…8.6
- CVE-2026-19542Calling tdelete on a sufficiently deep tree in the GNU C Lib…5.6
- CVE-2026-19546A flaw was found in DBI. This is a fix for a partial fix for…8.8
- CVE-2026-19548Multiple Use-After-Free vulnerabilities were found in the ad…5.5
- CVE-2026-19550A flaw was found in FreeIPA. The trust-fetch-domains command…8.2
- CVE-2026-19556Use after free in V8 in Google Chrome prior to 151.0.7922.13…8.8
- CVE-2026-19557Use after free in TabStrip in Google Chrome on Mac prior to …8.3
- CVE-2026-19558Use after free in Extensions in Google Chrome prior to 151.0…7.5
Are you affected by CVE-2026-19543?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST