CVE-2026-93005
Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
- 6.5MediumCVSS base score
- 0.24%Exploitation in 30 daysEPSS · top 84% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated attacker to cause a denial of service through insufficient rate limiting of email notifications, resulting in excessive emails being sent to targeted recipients.
Timeline
ID reserved
By ibm
- 52 days later
· 52 days later
Published
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| ibmCNA (assigner) | 3.1 | Medium6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Awaiting Analysis | 3.1 | Medium6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.24% · top 84% of all CVEs (11 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.
Affected products
- affected 2.0.0 – ≤ 2.2.1
What to do
Solution: Product(s)Version(s) number and/or range Remediation/Fix/InstructionsIBM Process Mining OCP2.0.0 - 2.2.1 IBM strongly suggests that you address the vulnerabilities now for all affected products/versions listed above by installing 2.2.1 IF001 Upgrade to version 2.2.1 IF001 https://www.ibm.com/support/pages/readme-ibm-process-mining-221-if001 uniIBM Process Mining On-Prem2.0.0 - 2.2.1IBM strongly suggests that you address the vulnerabilities now for all affected products/versions listed above by installing 2.2.1 Steps 1. Go to IBM Support Portal Navigate to https://ibm.com/mysupport and sign in with your IBMid before proceeding. 2. Open a case * Click "Open a case" from the support portal. * Select IBM Process Mining as the product. * Fill in the case details, referencing the published security advisory: https://www.ibm.com/support/pages/node/7294875 * Request the delivery of IBM Process Mining 2.2.1 IF001, which addresses the documented vulnerabilities. 3. Obtain the fix The interim fix will be delivered directly through your support case once it has been opened.
References
References1
- https://www.ibm.com/support/pages/node/7294875 (opens in a new tab)vendor-advisorypatch
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-119738 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-93005)Record last updated .