CVE-2026-10025

Name of the Vulnerable Software and Affected Versions IBM QRadar versions 7.6.0.0 through 7.6.0.1 IBM QRadar versions 7.5.0 through 7.5.0 UP 15 Interim Fix 005

Description An XML External Entity (XXE) injection issue exists in the parseXmlPayload() function within the event processing pipeline (q1labs core.jar). This occurs when the system is configured to use XML-format property autodetection for at least one log source type, allowing the processing of XML-formatted syslog events sent to port 514 (UDP/TCP) without authentication. XXE is a type of attack that occurs when an XML parser improperly handles external entity references within an XML document.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.