CVE-2026-10025

IBM QRadar SIEM is affected by an XML External Entity (XXE) vulnerability (CVE-2026-10025) in the parseXmlPayload() path of the event processing pipeline (q1labs_core.jar). It requires XML-Property Autodetection to be enabled on at least one log source and the attacker to deliver specially crafte...