Medium · 5.5 CVE-2026-108292 EUVD-2026-119693GHSA-6vvj-rvgc-47gg

Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026

Published Nov 8, 2026 · Updated Nov 9, 2026 · Assigned by ibm

Description

IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.

Affected products

Vendor	Product	Affected	Fixed
IBM	Process Mining	2.0.0 – ≤ 2.2.1	—

References

https://www.ibm.com/support/pages/node/7294875 vendor-advisory patch