CVE-2026-10025

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity XXE injection vulnerability. The vulnerability resides in the parseXmlPayload function within the event processing pipeline q1labscore.jar . When at least one log source type is configured...

CVE-2026-10025: Improper Restriction of XML External Entity Reference

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity XXE injection vulnerability. The vulnerability resides in the parseXmlPayload function within the event processing pipeline q1labscore.jar . When at least one log source type is configured...

PT-2026-68197

Name of the Vulnerable Software and Affected Versions IBM QRadar versions 7.6.0.0 through 7.6.0.1 IBM QRadar versions 7.5.0 through 7.5.0 UP 15 Interim Fix 005 Description An XML External Entity XXE injection issue exists in the parseXmlPayload function within the event processing pipeline q1labs...