What is the CVSS score of CVE-2026-15091?

CVE-2026-15091 has a CVSS 3.1 base score of 9.3 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N. EPSS exploitation probability: 0.6%.

Which versions of IBM Engineering AI Hub are affected by CVE-2026-15091?

IBM Engineering AI Hub versions 1.0.0-1.2.0 contain a critical vulnerability that enables account takeover and unauthorized access to connected applications through authenticated user sessions.. A patch is available.

How to fix or mitigate CVE-2026-15091?

Within 24 hours, inventory all deployed instances of IBM Engineering AI Hub and document version numbers across your environment. Within 7 days, obtain the patched version from IBM and coordinate upgrade scheduling with system owners and application teams. Within 30 days, deploy the patched release to all affected production systems and validate full functionality before closure.

IBM Engineering AI Hub CVE-2026-15091

EUVD-2026-45261 CRITICAL

Cross-site Scripting (XSS) (CWE-79)

2026-07-17 ibm

GHSA-x4wg-frgq-2r3q

XSS IBM Engineering Ai Hub

9.3

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

9.3 CRITICAL

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

vuln.today AI

6.1 MEDIUM

Network-reachable XSS with low complexity and no auth but requiring victim interaction (UI:R); impact is browser-context-bounded so C:L/I:L, with S:C reflecting cross-context script execution.

3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 17, 2026 - 20:15 vuln.today

CVE Published

Jul 17, 2026 - 19:38 cve.org

CRITICAL 9.3

DescriptionCVE.org

IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary scripts due to improper neutralization of input during web page generation.

AnalysisAI

Stored/reflected cross-site scripting in IBM Engineering AI Hub 1.0.0 through 1.2.0 lets a remote unauthenticated attacker inject arbitrary scripts into generated web pages that execute in a victim's authenticated browser session. Because the CVSS scope is marked changed (S:C), successful exploitation can impact resources beyond the vulnerable component - such as the user's session with adjacent applications. No public exploit has been identified at time of analysis, and the CVE is not listed in CISA KEV.

Technical ContextAI

IBM Engineering AI Hub is an enterprise application-lifecycle/engineering tooling platform (CPE cpe:2.3:a:ibm:engineering_ai_hub). The flaw is CWE-79, Improper Neutralization of Input During Web Page Generation (Cross-site Scripting): user-controllable input is embedded into HTML output without sufficient encoding or sanitization, so a browser interprets attacker-supplied data as executable script. The UI:R requirement and 'web page generation' language indicate the payload is rendered back through the application's web interface, and the changed scope (S:C) suggests script execution reaches security context boundaries outside the injecting component (e.g. the user's broader authenticated session).

RemediationAI

Apply the vendor-provided fix: Patch available per vendor advisory (IBM Support document https://www.ibm.com/support/pages/node/7279964) - consult that advisory for the exact fixed release, as no specific patched version string was supplied in the input and version numbers should not be invented. Until patching, compensating controls for XSS include deploying a strict Content-Security-Policy that disallows inline script execution (trade-off: may break legitimate inline scripts in the app UI), enabling web application firewall rules to filter script-injection patterns on inputs reaching the affected pages (trade-off: signature-based filtering is bypassable and can cause false positives), and restricting access to the Engineering AI Hub web interface to trusted networks or authenticated VPN users to reduce attacker reach (trade-off: reduces convenience for remote/distributed teams). Confirm exact fix versions from the IBM advisory before scheduling the upgrade.