What is the CVSS score of CVE-2026-1567?

CVE-2026-1567 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Infosphere Information Server are affected by CVE-2026-1567?

IBM Infosphere Information Server versions up to 11.7.1.6 contain an XML External Entity (XXE) vulnerability that could allow attackers to read sensitive files, cause denial of service, or execute…

How to fix or mitigate CVE-2026-1567?

Within 24 hours: Identify all systems running Infosphere Information Server versions ≤11.7.1.6 and restrict network access to trusted sources only. Within 7 days: Implement WAF rules to block malicious XXE payloads and disable XML external entity processing where possible. Within 30 days: Upgrade to patched versions when available or evaluate replacement solutions; continuously monitor for patch release announcements from IBM.

Infosphere Information Server CVE-2026-1567

HIGH

Improper Restriction of XML External Entity Reference (CWE-611)

2026-03-03 psirt@us.ibm.com

IBM XXE Infosphere Information Server

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

CVE Published

Mar 03, 2026 - 21:15 nvd

HIGH 7.1

DescriptionCVE.org

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity (XXE) vulnerability in IBM InfoSphere Information Server could allow attackers to retrieve sensitive information from the server.

AnalysisAI

Infosphere Information Server versions up to 11.7.1.6 is affected by improper restriction of xml external entity reference (CVSS 7.1).

Technical ContextAI

This vulnerability (CWE-611: Improper Restriction of XML External Entity Reference) affects Infosphere Information Server. IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity (XXE) vulnerability in IBM InfoSphere Information Server could allow attackers to retrieve sensitive information from the server.