CVE-2026-4788 is a vulnerability in IBM Tivoli Netcool Impact (versions 7.1.0.0 through 7.1.0.37) where sensitive information is improperly inserted into log files. These log files can be read by local users, potentially exposing confidential data. The vulnerability is categorized as CWE-532, which involves the insertion of sensitive information into log files. The CVSS v3.1 score of 8.4 indicates a high-severity issue with local attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact affects confidentiality, integrity, and availability. No official fix or patch has been documented yet.

The vulnerability allows local users to access sensitive information stored in log files, which could lead to unauthorized disclosure of confidential data. The high CVSS score (8.4) indicates that the impact on confidentiality, integrity, and availability is significant if exploited. However, exploitation requires local access and no known exploits are currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to systems running affected versions of IBM Tivoli Netcool Impact to trusted users only. Monitor for any updates from IBM regarding patches or workarounds.