Common Licensing EUVD-2026-75877

IBM Common Licensing (versions 9.0-9.0.0.2) contains an HTTP Host header injection vulnerability that enables open redirects, creating significant phishing and credential theft risk against employees authenticating through affected infrastructure. No public exploit code has been identified at time of analysis, but the attack is straightforward and publicly documented. Organizations using Common Licensing Agent or ART must patch immediately to prevent widespread account compromise.

Within 24 hours, inventory all deployments of IBM Common Licensing 9.0 through 9.0.0.2 across your environment and disable any internet-facing instances that cannot be immediately patched. Within 7 days, apply the vendor-released patch (available from IBM support node 7286490) to all affected Agent and ART systems, prioritizing authentication-critical and externally accessible deployments; concurrently conduct user awareness communications on phishing attacks using fraudulent redirects and the importance of verifying domain authenticity before credential entry. Within 30 days, complete patching of all remaining affected systems, validate patch effectiveness through redirect-handling testing, and review authentication logs for anomalous login patterns or evidence of exploitation attempts during the vulnerable window.

Apply vendor patch.