CVE-2016-2876

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-11-30 · updated 2026-06-17
Weakness: CWE-78

Description

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an incorrect privilege level, which makes it easier for remote authenticated users to obtain root access by leveraging a command-injection issue.

Affected products

IBM QRadar SIEM: through 7.1.0; 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5 (+1)

References

http://www-01.ibm.com/support/docview.wss?uid=swg21987774
http://www.securityfocus.com/bid/95001
http://www-01.ibm.com/support/docview.wss?uid=swg21987774
http://www.securityfocus.com/bid/95001

Get alerted when CVE-2016-2876 or the next vulnerability affects your stack