Verified Advisories

Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 2 total.

Severity: All Critical High

Library: engineering_ai_hub

engineering_ai_hub 2 CVEs from one advisory advisory

CVE-2026-15322 HIGH CVSS 7.5 Verified Advisory Jul 17, 2026

Information disclosure in IBM Engineering AI Hub in (CVE-2026-15322)

CVE-2026-15322 is an information disclosure vulnerability in IBM Engineering AI Hub in which session tokens are exposed in URLs (CWE-598: Use of HTTP Request With Sensitive Query String). A remote, unauthenticated att...

Fixed in 1.3.0

IBM Information Disclosure Engineering Ai Hub

CVE-2026-15091 CRITICAL CVSS 9.3 Verified Advisory Jul 17, 2026

Cross-site scripting (CWE-79) in IBM Engineering AI Hub (CVE-2026-15091)

CVE-2026-15091 is a cross-site scripting (CWE-79) vulnerability in IBM Engineering AI Hub caused by improper neutralization of input during web page generation. A remote attacker could exploit this flaw to execute arb...

Fixed in 1.3.0

XSS IBM Engineering Ai Hub