CVE-2026-13365 is a Cross-Site Request Forgery (CWE-352) vulnerability in IBM Planning Analytics 2.0 and 2.1 Local. It allows attackers to execute unauthorized actions by leveraging the trust a website has in a user's browser. The CVSS 3.1 base score is 7.1, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact. No official patch or remediation level is currently stated, and no known exploits are reported in the wild.

An attacker could cause a user to unknowingly perform actions that compromise the integrity of the IBM Planning Analytics system. There is no direct confidentiality impact, but the integrity of data or operations can be significantly affected. Availability impact is low, meaning the system's availability is minimally affected by this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens or other application-level mitigations. Monitor IBM advisories for updates on patches or official mitigations.