critical
advisory
IBM Watson Speech Services Cartridge: Use-after-free remote code execution (CVE-2026-82418)
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code.
CVE search metadata
CVE search record: CVE-2026-82418. Severity: critical. CVSS: 9.8. KEV: no. Product: Watson Speech Services Cartridge (4.0.0 through 5.4.0). Brief: IBM Watson Speech Services Cartridge: Use-after-free remote code execution (CVE-2026-82418). Brief link: https://feed.craftedsignal.io/briefs/2026-11-cve-2026-82418/
Triage facts
Revision 1- Applicability
- Watson Speech Services Cartridge (4.0.0 through 5.4.0)
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Nov 4, 22:06 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 contains a use-after-free vulnerability (CVE-2026-82418). This vulnerability allows a remote attacker to execute arbitrary code. The CVSS v3.1 base score is 9.8.