IBM Planning Analytics Local Open Redirect (2.1.0-2.1.21) via Crafted URL
CVE-2026-10545 Published on July 30, 2026
IBM Planning Analytics Local is affected by Open Redirect
IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user sessions.
Vulnerability Analysis
CVE-2026-10545 can be exploited with network access, requires user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
What is an Open Redirect Vulnerability?
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. An http parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials. Because the server name in the modified link is identical to the original site, phishing attempts have a more trustworthy appearance.
CVE-2026-10545 has been classified to as an Open Redirect vulnerability or weakness.
Products Associated with CVE-2026-10545
Want to know whenever a new CVE is published for IBM Planning Analytics Local? stack.watch will email you.
Affected Versions
IBM Planning Analytics Local:- Version 2.1.0, <= 2.1.21 is affected.