CVE-2026-5522: CWE-798 Use of Hard-coded Credentials in IBM QRadar

CVE-2026-5522 is a vulnerability in IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 involving the use of hard-coded credentials such as passwords or cryptographic keys. These credentials are used internally for inbound authentication, outbound communication to external components, or encryption of internal data. The vulnerability has a CVSS 3.1 base score of 6.7 with attack vector local, low attack complexity, high privileges required, no user interaction, and scope changed. The impact includes high confidentiality loss, low integrity loss, and no availability impact. There is no vendor advisory or patch available at this time.

An attacker with high privileges on the affected IBM QRadar system could leverage the hard-coded credentials to gain unauthorized access to inbound authentication mechanisms, intercept or manipulate outbound communications, or decrypt internal data. This leads to a high confidentiality impact and a low integrity impact. Availability is not affected. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to affected systems to trusted administrators only and monitor for suspicious activity related to authentication and communication channels. Avoid exposing the affected QRadar versions to untrusted networks.