Skip to content
Critical Vulnerabilities in IBM SPSS Modeler Linked to Apache OpenNLP

Critical Vulnerabilities in IBM SPSS Modeler Linked to Apache OpenNLP

First seen 13 Oct 2026, 11:30 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 13, 2026 at 12:30 UTC
  • •IBM SPSS Modeler is affected by critical and medium vulnerabilities in Apache OpenNLP.
  • •CVE-2026-82617 is a critical flaw that can cause software crashes.
  • •IBM has issued a security update, but no active exploitation has been reported.

IBM SPSS Modeler is vulnerable to two security flaws in the Apache OpenNLP library, which could allow attackers to crash the software or execute arbitrary classes. The critical vulnerability (CVE-2026-82617) involves processing specific patterns in emails and URLs, enabling crashes through crafted requests. The second medium-severity vulnerability allows attackers to load and execute Java classes from the classpath, but requires specific conditions. IBM has released a security update for SPSS Modeler 19.0.0.0 and recommends users of Apache OpenNLP update to versions 2.5.12 or 3.0.0-M6. There are currently no reports of of these vulnerabilities. The vulnerabilities were disclosed on October 13, 2026, and are linked to the use of the affected library in IBM's data mining software.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-11
CVE-2026-82617 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
Vulnerabilities disclosed
IBM announced vulnerabilities in SPSS Modeler due to issues in Apache OpenNLP, including a critical flaw affecting version 19.0.0.0.
Heise.De
2026-10-13
Security update released
IBM released a patch for SPSS Modeler and advised users to update Apache OpenNLP to mitigate the vulnerabilities.
IBM.com

More articles in this cluster (2)

Following this threat?

Track IBM and CVE-2026-82617 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 2

Common questions

Which versions of SPSS Modeler are affected?
IBM SPSS Modeler version 19.0.0.0 is affected by the vulnerabilities.
What should users do to protect themselves?
Users should apply the security update provided by IBM and update Apache OpenNLP to the recommended versions.
Is there any evidence of exploitation?
Currently, there are no indications that these vulnerabilities are being actively exploited.