https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T06:52:49.246424+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-36126 CVE-2025-36126 — IBM Cognos Analytics is affected by Cross-site scripting. 2026-10-07T06:52:49.262477+00:00

Affected: IBM Cognos Analytics, IBM Cognos Transformer

IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.