CVE-2026-0977

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-0977
IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls.

5.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/pages/node/7263518 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:cics_transaction_gateway:9.3:*:*:*:*:multiplatforms:*:*
cpe:2.3:a:ibm:cics_transaction_gateway:10.1:*:*:*:*:multiplatforms:*:*
History

02 Apr 2026, 14:08

Type Values Removed Values Added
CPE cpe:2.3:a:ibm:cics_transaction_gateway:10.1:*:*:*:*:multiplatforms:*:*
cpe:2.3:a:ibm:cics_transaction_gateway:9.3:*:*:*:*:multiplatforms:*:*
First Time Ibm cics Transaction Gateway
Ibm
CWE NVD-CWE-Other
Summary
  • (es) IBM CICS Transaction Gateway para multiplataformas 9.3 y 10.1 podría permitir a un usuario transferir o ver archivos debido a controles de acceso inadecuados.
References () https://www.ibm.com/support/pages/node/7263518 - () https://www.ibm.com/support/pages/node/7263518 - Vendor Advisory

16 Mar 2026, 14:18

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-16 14:18

Updated : 2026-04-02 14:08

NVD link : CVE-2026-0977

Mitre link : CVE-2026-0977

CVE.ORG link : CVE-2026-0977

JSON object : View

Products Affected

ibm

  • cics_transaction_gateway
CWE
CWE-284

Improper Access Control

NVD-CWE-Other