CVE-2026-82418
CriticalCVSS 9.8Summary
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a use-after-free vulnerability that could allow a remote attacker to execute arbitrary code.
Risk Assessment
Exploitation could lead to code execution within the service context, posing a serious risk to data confidentiality and integrity.
Recommendation
Update IBM Watson Speech Services Cartridge to a version later than 5.4.0 that includes the fix, or apply the vendor's mitigation guidance.
Other vulnerabilities in IBM Watson Speech Services Cartridge
See all- CVE-2026-19319Medium
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
- CVE-2026-17493High
IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain an out-of-bounds read vulnerability. A remote attacker could exploit this to cause a denial of service.
- CVE-2026-16725Medium
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.
Original NVD description (English source)
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS