CVE-2026-8636 is a vulnerability in IBM Datacap and IBM Datacap Navigator versions 9.1.7, 9.1.8, and 9.1.9 where sensitive information such as user passwords and cryptographic keys are stored in cleartext in memory. An attacker with local access and low privileges can retrieve these credentials from memory, potentially decrypt passwords, and gain unauthorized access to the application and its sensitive data. The vulnerability is classified under CWE-316 (Cleartext Storage of Sensitive Information in Memory). No official patch or remediation level has been published as of the data provided.

An attacker with local access and low privileges can extract sensitive credentials and cryptographic keys from memory, which may allow them to decrypt user passwords and gain unauthorized access to the IBM Datacap application and its underlying sensitive data. The vulnerability does not impact availability or integrity directly but compromises confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, organizations should monitor IBM's advisories for updates. Until a patch is available, restrict local access to affected systems to trusted personnel only and consider additional controls to protect memory contents and credentials.