CVE-2026-15995

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics versions 12.1.3 GA through 12.1.3-2606251736

Description A race condition exists in the Agentic AI assistant's concurrent request-handling logic. This occurs when multiple authenticated users submit report-related tasks simultaneously, which could allow an attacker to obtain incorrect report summary results or cause report-processing failures. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events.

Recommendations Update IBM Cognos Analytics to a version later than 12.1.3-2606251736.