CVE-2026-105991: Multiple vulnerabilities that affects IBM Db2 Genius Hub
Published Nov 4, 2026
·Updated
IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to a missing Content Security Policy header.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2 Genius Hubto a version that resolves this vulnerability.Fixed in 1.1.6
Event History
Nov 4, 2026
CVE Published
via MITRE·08:59 PM
Data Sourced
via MITRE·08:59 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
A remote attacker must be authenticated to IBM Db2 Genius Hub. Exploitation also requires user interaction.
2
Which releases are identified as affected?
IBM Db2 Genius Hub versions 1.1.2, 1.1.3, 1.1.4, and 1.1.5 are listed as affected.
3
What security impact is described?
The missing Content Security Policy header could allow an authenticated remote attacker to bypass security restrictions. The stated impact is limited to confidentiality; integrity and availability impacts are not listed.