CVE-2026-108910: Multiple vulnerabilities that affects IBM Db2 Genius Hub
Published Nov 4, 2026
·Updated
IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to missing required cryptographic step.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2 Genius Hubto a version that resolves this vulnerability.Fixed in 1.1.6
Event History
Nov 4, 2026
CVE Published
via MITRE·08:58 PM
Data Sourced
via MITRE·08:58 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which IBM Db2 Genius Hub versions are affected?
IBM Db2 Genius Hub versions 1.1.2, 1.1.3, 1.1.4, and 1.1.5 are identified as affected.
2
What level of access does an attacker need?
An attacker must be remotely reachable and authenticated with at least low-level privileges. No user interaction is required.
3
What is the potential impact?
A successful attacker could obtain sensitive information. The provided impact data indicates confidentiality impact only, with no stated integrity or availability impact.