5.5
/ 10
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker can use the same keys to decrypt password, gain access to the application and access sensitive data in the database.
Basic Information
ID
CVE-2026-8636
Source
ibm
Published
Jun 22, 2026 at 14:16
Affected Product
Vendor
IBM
Product
Datacap
Version
9.1.7
Affected Versions
IBM Datacap 9.1.7
IBM Datacap 9.1.8
IBM Datacap 9.1.9
IBM Datacap Navigator 9.1.7
IBM Datacap Navigator 9.1.8
IBM Datacap Navigator 9.1.9
IBM Datacap 9.1.8
IBM Datacap 9.1.9
IBM Datacap Navigator 9.1.7
IBM Datacap Navigator 9.1.8
IBM Datacap Navigator 9.1.9