IBM SPSS Analytic Server: Schwachstelle ermöglicht Denial of Service
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM SPSS Analytic Server ausnutzen, um einen Denial of Service Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-41981 linked CVE
Open advisory with all CVEs
More on Analytic
Other advisories
- HighCVE-2026-102554IBM SPSS Analytic Server: Schwachstelle ermöglicht Denial of Service
- Not ratedosv:CVE-2026-63434MyTube: Visitor-Role Statistics Event Forgery Allows Analytics Data Poisoning
- Highosv:MAL-2026-18493Malicious code in @goparrot-dashboard/analytics (npm)
- HighCVE-2026-104744Independent Analytics Pro: Cross-Site-Scripting (XSS)
- HighCVE-2026-104744Independent Analytics Pro: Cross-Site-Scripting (XSS)
- MediumCVE-2026-119646Open Web Analytics: Umgehung der Autorisierung über nutzergesteuerten Schlüssel
- Not ratedosv:CVE-2026-119646Open Web Analytics before 1.14.1 Cross-Site Data Disclosure via REST Report API
- MediumCVE-2026-119646Open Web Analytics: Umgehung der Autorisierung über nutzergesteuerten Schlüssel
Other news entries
- APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android ExploitsNewsThe Hacker News
- IBM SPSS Analytic Server: Schwachstelle ermöglicht Denial of ServiceVulnerabilityBSI CERT-Bund
- Chainalysis discloses data breach from "offensive agentic techniques"NewsBleepingComputer
- Chainalysis says an attacker using agentic techniques accessed its systems; customer user names, emails and roles exposedBreachpwn.watch
- Amplitude analytics security incident exposes Coinbase customer contact dataBreachpwn.watch
- Hackers hijack Convertr analytics script to steal payment card dataNewsBleepingComputer
- Magecart skimmer planted in Convertr's self-hosted Plausible tracker hits Brazilian checkoutsBreachpwn.watch
- Meta hit with $25 billion fine for illegally sharing user dataNewsCSO Online
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4198
ID