CVE-2026-108536: Multiple vulnerabilities that affects IBM Db2 Genius Hub
IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to improper restriction of rendered UI layers or frames.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2 Genius Hubto a version that resolves this vulnerability.Fixed in 1.1.6
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of IBM Db2 Genius Hub versions 1.1.2, 1.1.3, 1.1.4, and 1.1.5 are identified as affected. Exploitation is remote but requires an authenticated attacker and user interaction.
What access does an attacker need to exploit it?
The attacker must already have authenticated access to the affected IBM Db2 Genius Hub instance. The CVSS vector also indicates that user interaction is required.
What is the potential impact?
An attacker may bypass security restrictions because of improper restriction of rendered UI layers or frames. The stated impact is low confidentiality and integrity impact, with no availability impact.