CVE-2026-116499

Published 8 November 2026 · tracked since 9 November 2026

Description

IBM Qiskit SDK 1.4.2 through 2.6.2 could allow a local attacker to execute arbitrary code due to deserialization of untrusted data.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-113364
• CVE-2026-113363
• CVE-2026-113362
• CVE-2026-124502 MEDIUM 4.3
• CVE-2026-124500 MEDIUM 6.3
• CVE-2026-124499 MEDIUM 4.7
• CVE-2026-18893 HIGH 7.1
• CVE-2026-18546 MEDIUM 5.4
• CVE-2026-120113 MEDIUM 6.4
• CVE-2026-116500 MEDIUM 6.2

→ Open the live CVE board · all tools