CVE-2026-3295

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak System versions 2.3.6.0 through 2.3.6.1

Description An authenticated attacker can exploit a stored cross-site scripting (XSS) flaw where the web application fails to properly sanitize or HTML-encode user-supplied input before it is stored and rendered. This allows the attacker to inject malicious JavaScript payloads that execute automatically when other users view the affected pages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.