Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-19646 EUVD-2026-75877GHSA-4qf7-45mf-9g63

Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

Published Sep 10, 2026 · Updated Sep 11, 2026 · Assigned by ibm

Vendor: IBM Product: Common Licensing

Description

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to improper validation of the HTTP Host header.

Affected products

VendorProductAffectedFixed
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, ART 9.0.0.2 —

References