What is the CVSS score of CVE-2026-17467?

CVE-2026-17467 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2026-17467?

Yes, a patch is available for CVE-2026-17467. Update the affected software to the latest version immediately.

Cloud Pak For Data System Yosemite 1 0 CVE-2026-17467

EUVD-2026-77782 HIGH

Use of a Broken or Risky Cryptographic Algorithm (CWE-327)

2026-09-14 ibm

GHSA-f8gh-pcjh-j8jc

Information Disclosure IBM Cloud Pak For Data System Yosemite 1 0

8.2

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

8.2 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Primary rating from Vendor (ibm) · only source for this CVE.

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 11:20 vuln.today

CVE Published

Sep 14, 2026 - 19:39 cve.org

HIGH 8.2

DescriptionCVE.org

IBM Cloud Pak for Data System (Yosemite 1.0) 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols.

AnalysisAI

IBM Cloud Pak for Data System (Yosemite 1.0) version 3.0.5.2 exposes sensitive information to remote attackers because it continues to negotiate weak or deprecated cryptographic protocols, rated CVSS 8.2 (AV:N/AC:L/PR:N/UI:N, C:H/I:L/A:N) with a high confidentiality impact. Any deployment running the affected 3.0.5.2 build on a reachable network segment is in scope, and per CISA's SSVC evaluation the flaw is automatable though no active exploitation has been observed. …