CVE-2026-4788 is a vulnerability in IBM Tivoli Netcool Impact (versions 7.1.0.0 through 7.1.0.37) where sensitive information is improperly stored in log files. This allows local users to read potentially confidential data from these logs. The issue is categorized under CWE-532, which concerns the insertion of sensitive information into log files. The vulnerability has a CVSS v3.1 base score of 8.4, indicating a high severity with local attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact affects confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates or user mitigation.

The vulnerability allows local users to access sensitive information stored in log files, potentially leading to unauthorized disclosure of confidential data. The CVSS score of 8.4 indicates high impact on confidentiality, integrity, and availability. Exploitation requires local access but no privileges or user interaction. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to affected systems and limit log file permissions to trusted users only. Monitor IBM's advisories for updates on patches or official mitigations.