IBM Storage Protect Client Heap Overflow Vulnerability (CVE-2026-13473) Advisory

IBM Storage Protect Client Heap Overflow Vulnerability (CVE-2026-13473) Vulnerability Overview IBM Storage Protect Client contains a heap overflow vulnerability due to unchecked string copy operations. A remote attacker can exploit this vulnerability to overflow a buffer and execute arbitrary code, causing the server to crash. Affected Versions IBM Storage Protect Client 8.1.0.0 - 8.1.27.0, 8.1.27.1 IBM Storage Protect Client 8.2.0.0 - 8.2.1.0 Remediation IBM strongly recommends resolving this vulnerability immediately. Manual Upgrade 8.1.0.0 - 8.1.27.0, 8.1.27.1: Upgrade to 8.2.1.0 through 8.2.1.2 8.2.0.0 - 8.2.1.0: Upgrade to 8.2.0.0 through 8.2.1.2 Upgrade via Automatic Client Deployment 8.1.0.0 - 8.1.27.0, 8.1.27.1: Upgrade to 8.2.1.2 through 8.2.1.2, 8.1.27.1 through 8.2.0.0 through 8.2.1.2 8.2.0.0: Upgrade to 8.2.1.2 References Complete CVSS v3 Guide On-line Calculator v3 Known Issues and Limitations https://www.ibm.com/support/pages/node/7253900 Related Information IBM Secure Engineering Web Portal IBM Product Security Incident Response Blog Acknowledgements This vulnerability was reported to IBM by Pétur Eyjólfsson and Cristie Nordic. Change History July 10, 2026: Initial release Disclaimer According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an “industry open standard” intended to communicate vulnerability severity and help determine the urgency and priority of response. IBM provides CVSS scores “as is” without any express or implied warranties, including but not limited to warranties of merchantability and fitness for a particular purpose. The customer is responsible for evaluating the impact of any actual or potential security vulnerabilities. As part of this effort, IBM identifies packages previously unidentified in the product/service list. The inclusion of older CVE dates in the inventory does not indicate that the referenced product has been used by IBM since that date, nor does it indicate that IBM was aware of the vulnerability on that date. We are working to make customers aware of relevant vulnerabilities, increasing our understanding of them as we gain more knowledge. The cited “Affected Products and Versions” are intended to support only products and versions of IBM that have not yet reached end-of-support. Therefore, products and versions that are not mentioned in this security advisory because they are unsupported or out of extended support do not constitute a determination by IBM that they are unaffected by the vulnerability. References to one or more unsupported versions cited in this security advisory do not constitute an obligation by IBM to provide a fix for any unsupported or extended support product or version.

Goal Reached Thanks to every supporter — we hit 100%!

IBM Storage Protect Client Heap Overflow Vulnerability (CVE-2026-13473) Advisory

More from this source