CVE-2026-110282: Multiple vulnerabilities that affects IBM Db2 Genius Hub
IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to improper access control.
Other sources
IBM Db2 Genius Hub could allow a remote authenticated attacker to bypass security restrictions due to improper access control.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2 Genius Hubto a version that resolves this vulnerability.Fixed in 1.1.6
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker who is already authenticated to IBM Db2 Genius Hub could exploit the improper access control issue. The provided information does not indicate that unauthenticated attackers are affected.
Which versions are identified as affected?
IBM Db2 Genius Hub versions 1.1.2, 1.1.3, 1.1.4, and 1.1.5 are identified as affected.
What is the potential impact?
An authenticated attacker could bypass security restrictions. The supplied severity vector indicates an integrity impact, with no stated confidentiality or availability impact.