https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T04:48:56.685127+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-2477 CVE-2026-2477 — Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge 2026-11-11T04:48:56.686537+00:00

Affected: IBM watsonx Orchestrate Cartridge for Cloud Pak for Data

IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 fails to enforce backend authorization checks, allowing low‑privileged users to directly invoke administrative API endpoints. This bypasses UI‑level access restrictions and may lead to unauthorized execution of privileged functions.