IBM Qradar vulnerabilities

2 CVEs affecting IBM Qradar, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-33141, published 2026-09-18.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-33141, published 2026-09-18. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
• CVE-2026-5522, published 2026-09-04. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication…