---
id: CVE-2026-76587
title: IBM Planning Analytics Buffer Overflow
summary: "IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper\_bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system."
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-121
vendor: IBM
product: Planning Analytics
affected:
  - planning_analytics 2.0
  - planning_analytics 2.1
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T22:07:47.557Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-76587'
references:
  - url: 'https://www.ibm.com/support/pages/node/7291604'
tags:
  - cve.org
ingestedAt: '2026-10-20T22:23:33.689Z'
---

## Overview

IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.

## Affected

- `planning_analytics 2.0`
- `planning_analytics 2.1`

## Remediation

It is strongly recommended that you apply the most recent security updates: 

Affected Product(s)Version(s)FixIBM Planning Analytics Local2.1.0 - 2.1.23 IBM Planning Analytics Local 2.1.24 is now available for download from Fix Central https://w3.ibm.com/w3publisher/capa-release-announcements/2026-releases/pa-2026-releases 



IBM Planning Analytics Cloud environment has been remediated.