CVE-2026-105702: Multiple vulnerabilities that affects IBM Db2 Genius Hub

Published Nov 4, 2026

Updated

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to exposure of error messages containing internal implementation details.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Db2 Genius Hub to a version that resolves this vulnerability.
Fixed in 1.1.6

Event History

Nov 4, 2026

CVE Published

via MITRE·08:59 PM

Data Sourced

via MITRE·08:59 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

IBM Db2 Genius Hub versions 1.1.2, 1.1.3, 1.1.4, and 1.1.5 are identified as affected.

What access does an attacker need?

An attacker must be able to authenticate to the affected IBM Db2 Genius Hub instance and can exploit the issue remotely. No user interaction is required.

What is the likely impact of exploitation?

The issue can expose sensitive information through error messages that reveal internal implementation details. The provided severity vector indicates low confidentiality impact, with no stated integrity or availability impact.