Findings

CVE-2026-17475

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional…

Published Oct 12, 2026 · updated Oct 15, 2026 · ibm planning analytics

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 12, 2026 · NIST NVD

    Detected

    IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control.

  2. Oct 15, 2026 · NIST NVD

    Updated

    IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control.

Affected

  • cpe ibm/planning analytics2.0
  • cpe ibm/planning analytics2.1

Sources

  • CVE.orgVulnerability recordCVE-2026-17475

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-17475

    IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control.

    nvd.nist.gov

References

CVE-2026-17475 · ZeroDay Findings