CVE-2026-109839: IBM Db2 Genius Hub Missing Cryptographic Step

Q: Who is exposed to this issue?

IBM Db2 Genius Hub 1.0 deployments are affected. Exploitation is described as remote, but the attacker must already be authenticated.

Q: What access and conditions does an attacker need?

An attacker needs remote authenticated access and must overcome high attack complexity. No user interaction is required.

Q: What is the expected impact if exploitation succeeds?

The issue may let an authenticated attacker bypass security restrictions and alter integrity. The provided severity data indicates no confidentiality or availability impact.

Published Oct 14, 2026

Updated

IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm.

Other sources

IBM Db2 Genius Hub could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm.

— IBM

Affected Software

1 affected componentFixes available

IBM Db2 intelligence center<=1.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Db2 Genius Hub to a version that resolves this vulnerability.
Fixed in 1.1.0

Event History

Oct 14, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Oct 16, 2026

CVE Published

via MITRE·05:37 PM

Data Sourced

via MITRE·05:37 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7292486

Frequently Asked Questions

Who is exposed to this issue?

IBM Db2 Genius Hub 1.0 deployments are affected. Exploitation is described as remote, but the attacker must already be authenticated.

What access and conditions does an attacker need?

An attacker needs remote authenticated access and must overcome high attack complexity. No user interaction is required.

What is the expected impact if exploitation succeeds?

The issue may let an authenticated attacker bypass security restrictions and alter integrity. The provided severity data indicates no confidentiality or availability impact.

CVE-2026-109839: IBM Db2 Genius Hub Missing Cryptographic Step

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Who is exposed to this issue?

What access and conditions does an attacker need?

What is the expected impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What access and conditions does an attacker need?

What is the expected impact if exploitation succeeds?