CVE-2026-1726 - Vulnerability Details - OpenCVE

IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00005.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Ibm	Guardium Key Lifecycle Manager

No data.

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7268697

History

Thu, 23 Apr 2026 13:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 4.8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 23 Apr 2026 00:00:00 +0000

Type	Values Removed	Values Added
Description		IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1
Title		Multiple Vulnerabilities in IBM Guardium Key Lifecycle Manager
First Time appeared		Ibm Ibm guardium Key Lifecycle Manager
Weaknesses		CWE-269
CPEs		cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.1.0:::::::* cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.1.1:::::::* cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.1:::::::* cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.2.0:::::::* cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.2.1:::::::* cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.2:::::::* cpe:2.3:a:ibm:guardium_key_lifecycle_manager:5.0.0:::::::* cpe:2.3:a:ibm:guardium_key_lifecycle_manager:5.0:::::::* cpe:2.3:a:ibm:guardium_key_lifecycle_manager:5.1.0:::::::* cpe:2.3:a:ibm:guardium_key_lifecycle_manager:5.1:::::::*
Vendors & Products		Ibm Ibm guardium Key Lifecycle Manager
References		https://www.ibm.com/support/pages/node/7268697

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-04-22T23:42:05.901Z

Updated: 2026-04-23T12:57:25.129Z

Reserved: 2026-01-30T22:03:35.181Z

Link: CVE-2026-1726

Vulnrichment

Updated: 2026-04-23T12:57:14.651Z

NVD

Status : Received

Published: 2026-04-23T00:16:44.920

Modified: 2026-04-23T13:16:11.260

Link: CVE-2026-1726

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1726", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-01-30T22:03:35.181Z", "datePublished": "2026-04-22T23:42:05.901Z", "dateUpdated": "2026-04-23T12:57:25.129Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-04-22T23:42:05.901Z"}, "title": "Multiple Vulnerabilities in IBM Guardium Key Lifecycle Manager", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Guardium Key Lifecycle Manager", "versions": [{"status": "affected", "version": "4.1.0", "versionType": "semver"}, {"status": "affected", "version": "4.1.1", "versionType": "semver"}, {"status": "affected", "version": "4.2.0", "versionType": "semver"}, {"status": "affected", "version": "4.2.1", "versionType": "semver"}, {"status": "affected", "version": "5.0.0", "versionType": "semver"}, {"status": "affected", "version": "5.1.0", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:5.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:5.1.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7268697", "tags": ["vendor-advisory", "patch"]}], "solutions": [{"lang": "en", "value": "IBM encourages customers to update their systems promptly.\u00a0\n\nPrincipal Product and Version(s)Remediation/FixesIBM Guardium Key Lifecycle Manager (GKLM) v4.11. Download IBM Guardium Key Lifecycle Manager\u00a0 https://www.ibm.com/docs/en/gklm/5.x?topic=software-download-instructions", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p><strong>IBM encourages customers to update their systems promptly.\u00a0</strong></p><div><div><table><tbody><tr><td><strong>Principal Product and Version(s)</strong></td><td><strong>Remediation/Fixes</strong></td></tr><tr><td>IBM Guardium Key Lifecycle Manager (GKLM) v4.1</td><td><p>1. Download IBM Guardium Key Lifecycle Manager\u00a0<a href=\"https://www.ibm.com/software/passportadvantage/pao-customer\" rel=\"nofollow\">(GKLM) v5.1</a> (the product is available for download through<a href=\"https://www.ibm.com/software/passportadvantage/pao-customer\" rel=\"nofollow\"> IBM Passport Advantage)</a></p><p>2. Apply <a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FTivoli%2FIBM+Tivoli+Key+Lifecycle+Manager&fixids=5.1.0-ISS-GKLM-FP0001&source=SAR&function=fixId&parent=IBM%20Security\" rel=\"nofollow\">5.1.0-ISS-GKLM-FP0001</a></p></td></tr><tr><td>IBM Guardium Key Lifecycle Manager (GKLM) v4.1.1</td></tr><tr><td>IBM Guardium Key Lifecycle Manager (GKLM) v4.2</td></tr><tr><td>IBM Guardium Key Lifecycle Manager (GKLM) v4.2.1</td></tr><tr><td>IBM Guardium Key Lifecycle Manager (GKLM) v5.0</td></tr><tr><td>IBM Guardium Key Lifecycle Manager (GKLM) v5.1</td><td>Apply <a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FTivoli%2FIBM+Tivoli+Key+Lifecycle+Manager&fixids=5.1.0-ISS-GKLM-FP0001&source=SAR&function=fixId&parent=IBM%20Security\" rel=\"nofollow\">5.1.0-ISS-GKLM-FP0001</a></td></tr></tbody></table></div></div><p>Download instruction -\u00a0<a href=\"https://www.ibm.com/docs/en/gklm/5.x?topic=software-download-instructions\" rel=\"nofollow\">https://www.ibm.com/docs/en/gklm/5.x?topic=software-download-instructions</a></p><p></p><p></p><p></p>"}]}], "x_generator": {"engine": "ibm-cvegen"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-04-23T12:57:21.810623Z", "id": "CVE-2026-1726", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-23T12:57:25.129Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-1726", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-23T12:57:21.810623Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-23T12:57:14.651Z"}}], "cna": {"title": "Multiple Vulnerabilities in IBM Guardium Key Lifecycle Manager", "affected": [{"cpes": ["cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:4.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:5.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_key_lifecycle_manager:5.1.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Guardium Key Lifecycle Manager", "versions": [{"status": "affected", "version": "4.1.0", "versionType": "semver"}, {"status": "affected", "version": "4.1.1", "versionType": "semver"}, {"status": "affected", "version": "4.2.0", "versionType": "semver"}, {"status": "affected", "version": "4.2.1", "versionType": "semver"}, {"status": "affected", "version": "5.0.0", "versionType": "semver"}, {"status": "affected", "version": "5.1.0", "versionType": "semver"}]}], "solutions": [{"lang": "en", "value": "IBM encourages customers to update their systems promptly.\u00a0\n\nPrincipal Product and Version(s)Remediation/FixesIBM Guardium Key Lifecycle Manager (GKLM) v4.11. Download IBM Guardium Key Lifecycle Manager\u00a0 https://www.ibm.com/docs/en/gklm/5.x?topic=software-download-instructions", "supportingMedia": [{"type": "text/html", "value": "<p><strong>IBM encourages customers to update their systems promptly.\u00a0</strong></p><div><div><table><tbody><tr><td><strong>Principal Product and Version(s)</strong></td><td><strong>Remediation/Fixes</strong></td></tr><tr><td>IBM Guardium Key Lifecycle Manager (GKLM) v4.1</td><td><p>1. Download IBM Guardium Key Lifecycle Manager\u00a0<a href=\"https://www.ibm.com/software/passportadvantage/pao-customer\" rel=\"nofollow\">(GKLM) v5.1</a> (the product is available for download through<a href=\"https://www.ibm.com/software/passportadvantage/pao-customer\" rel=\"nofollow\"> IBM Passport Advantage)</a></p><p>2. Apply <a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FTivoli%2FIBM+Tivoli+Key+Lifecycle+Manager&fixids=5.1.0-ISS-GKLM-FP0001&source=SAR&function=fixId&parent=IBM%20Security\" rel=\"nofollow\">5.1.0-ISS-GKLM-FP0001</a></p></td></tr><tr><td>IBM Guardium Key Lifecycle Manager (GKLM) v4.1.1</td></tr><tr><td>IBM Guardium Key Lifecycle Manager (GKLM) v4.2</td></tr><tr><td>IBM Guardium Key Lifecycle Manager (GKLM) v4.2.1</td></tr><tr><td>IBM Guardium Key Lifecycle Manager (GKLM) v5.0</td></tr><tr><td>IBM Guardium Key Lifecycle Manager (GKLM) v5.1</td><td>Apply <a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FTivoli%2FIBM+Tivoli+Key+Lifecycle+Manager&fixids=5.1.0-ISS-GKLM-FP0001&source=SAR&function=fixId&parent=IBM%20Security\" rel=\"nofollow\">5.1.0-ISS-GKLM-FP0001</a></td></tr></tbody></table></div></div><p>Download instruction -\u00a0<a href=\"https://www.ibm.com/docs/en/gklm/5.x?topic=software-download-instructions\" rel=\"nofollow\">https://www.ibm.com/docs/en/gklm/5.x?topic=software-download-instructions</a></p><p></p><p></p><p></p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7268697", "tags": ["vendor-advisory", "patch"]}], "x_generator": {"engine": "ibm-cvegen"}, "descriptions": [{"lang": "en", "value": "IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-04-22T23:42:05.901Z"}}}, "cveMetadata": {"cveId": "CVE-2026-1726", "state": "PUBLISHED", "dateUpdated": "2026-04-23T12:57:25.129Z", "dateReserved": "2026-01-30T22:03:35.181Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-04-22T23:42:05.901Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}