CVE-2026-17466— IBM Optim Test Data Management 1.0.0, 1.1.0, and 1.2.0 impacted by Path Traversal, Rate Limiting, and Weak Password Policy vulnerabilities

Quick assessment

Affected

IBM Optim

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

IBM Optim 1.0.0、1.1.0 和 1.2.0 版本可能因路径遍历漏洞，允许已认证的远程攻击者获取敏感信息。

CVSS 9.1 · Critical Updated Nov 09, 2026

Possible ATT&CK Techniques 1 AI

T1083 · File and Directory Discovery

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

IBM Optim Test Data Management 1.0.0, 1.1.0, and 1.2.0 impacted by Path Traversal, Rate Limiting, and Weak Password Policy vulnerabilities

Source: CVE Program / CVE List V5

Vulnerability Description

IBM Optim 1.0.0, 1.1.0, and 1.2.0 could allow a remote authenticated attacker to obtain sensitive information due to path traversal.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

对路径名的限制不恰当(路径遍历)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
IBM	Optim	1.0.0	`cpe:2.3:a:ibm:optim:1.0.0:::::::*`

II. Public POCs for CVE-2026-17466

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-17466

请登录查看更多情报信息。

Other References for CVE-2026-17466 (1)

https://www.ibm.com/support/pages/node/7289719 vendor-advisory patch

https://www.cve.org/CVERecord?id=CVE-2026-17466

Same Patch Batch · IBM · 2026-11-08 · 53 CVEs total

CVE-2026-107331	9.9 CRITICAL	DataStage on Cloud Pak for Data has several vulnerabilities
CVE-2026-15266	9.8 CRITICAL	Multiple Vulnerabilities in IBM Concert Software
CVE-2026-114464	9.3 CRITICAL	Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for Oc
CVE-2026-101117	9.1 CRITICAL	IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) a
CVE-2026-110273	8.8 HIGH	Security Vulnerability identified in IBM TRIRIGA - Command Execution
CVE-2026-117545	8.8 HIGH	IBM webMethods Integration Server is vulnerable of bypassing the two-factor authentication
CVE-2026-116501	8.4 HIGH	Qiskit SDK C API may trigger an out of bounds write on accessing the unitary matrix with q
CVE-2026-116499	8.4 HIGH	Arbitrary Code Execution in Qiskit SDK QPY Deserialization
CVE-2026-105467	8.1 HIGH	IBM QRadar SIEM is vulnerable to Open Redirect and Reflected XSS
CVE-2026-107330	7.7 HIGH	DataStage on Cloud Pak for Data has several vulnerabilities
CVE-2026-18093	7.5 HIGH	IBM App Connect Enterprise is vulnerable to a credential exposure
CVE-2026-18893	7.1 HIGH	CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities
CVE-2026-18484	6.5 MEDIUM	IBM ContextForge MCP Gateway is affected by a denial-of-service via tool name collision th
CVE-2026-113698	6.5 MEDIUM	IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query wi
CVE-2026-18668	6.5 MEDIUM	Protection Mechanism Failure vulnerability affects IBM Sterling File Gateway
CVE-2026-14437	6.5 MEDIUM	IBM Storage Scale Path Traversal
CVE-2026-16427	6.5 MEDIUM	DataStage on Cloud Pak for Data has several vulnerabilities
CVE-2026-16699	6.5 MEDIUM	Vulnerability exists in IBM Netezza Appliance
CVE-2026-16433	6.5 MEDIUM	DataStage on Cloud Pak for Data has several vulnerabilities
CVE-2026-108284	6.5 MEDIUM	IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulner

Showing top 20 of 53 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same vendor: IBM

Same weakness: CWE-22