CVE-2026-13473 describes a heap-based buffer overflow vulnerability in IBM Storage Protect Client affecting versions 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0. The issue arises from improper bounds checking, enabling a remote attacker to overflow a buffer, which could lead to arbitrary code execution or server crashes. The vulnerability is rated high severity with a CVSS 3.1 score of 8.1, indicating network attack vector, high impact on confidentiality, integrity, and availability, and requiring no privileges or user interaction. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause a denial of service by crashing the server. This impacts confidentiality, integrity, and availability of the IBM Storage Protect Client environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting network exposure of the affected IBM Storage Protect Client instances and monitor for unusual activity related to this vulnerability.