CVE-2019-4166: IBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.

Security readout for executives and security teams

CVE-2019-4166 is an IBM StoredIQ 7.6 open redirect issue. An attacker could trick a user into visiting a crafted site that appears trusted, then redirect them to a malicious site for phishing or follow-on attacks. The issue requires user interaction and is not listed as CISA KEV in the provided bundle. Exposure is likely limited to organizations running IBM StoredIQ 7.6, especially where users can reach the StoredIQ web interface or receive links that appear to originate from it. Prioritize remediation if StoredIQ 7.6 is present and user-facing. Business risk is mainly credential theft, phishing, and trust abuse rather than direct server compromise. Mitigation focus: Review IBM advisory for official fixed versions, patches, or workarounds.; Inventory IBM StoredIQ deployments and identify any version 7.6 instances.; Prioritize remediation for internet-facing or broadly accessible StoredIQ interfaces..

Prepared

May 24, 2026, 09:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.