IBM Engineering Ai Hub vulnerabilities

4 CVEs affecting IBM Engineering Ai Hub, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15322, published 2026-07-17.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-15091, published 2026-07-17. Critical severity, CVSS 9.3. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary scripts due to improper neutralization of input during web page generation.
• CVE-2026-15322, published 2026-07-17. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to obtain sensitive information due to the exposure of session tokens in URLs.
• CVE-2026-15093, published 2026-07-17. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to malicious websites due to improper validation of user-supplied URLs.
• CVE-2026-15069, published 2026-07-17. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary script code due to improper neutralization of input during web page generation.