What is GHSA-mg6f-fphr-7chf?

GHSA-mg6f-fphr-7chf is a security advisory published by GitHub Security Advisories with Medium severity. IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0...

Which CVE IDs does GHSA-mg6f-fphr-7chf cover?

GHSA-mg6f-fphr-7chf covers the following CVE IDs: CVE-2026-1037. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mg6f-fphr-7chf?

GHSA-mg6f-fphr-7chf has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-mg6f-fphr-7chfMediumCVSS 6.1

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-1037 →

📋 Description

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-1037
https://www.ibm.com/support/pages/node/7286490
https://github.com/advisories/GHSA-mg6f-fphr-7chf