CVE-2026-110283: Multiple vulnerabilities that affects IBM Db2 Genius Hub
IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to cause a denial of service due to improper validation of user-influenced resource identifiers.
Other sources
IBM Db2 Genius Hub could allow a remote authenticated attacker to cause a denial of service due to improper validation of user-influenced resource identifiers.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2 Genius Hubto a version that resolves this vulnerability.Fixed in 1.1.6
Event History
Frequently Asked Questions
Which IBM Db2 Genius Hub releases are identified as affected?
The affected releases are 1.1.2, 1.1.3, 1.1.4, and 1.1.5.
Can an unauthenticated internet user exploit this issue?
No. Exploitation requires a remote attacker to be authenticated and to have low privileges.
What is the expected security impact?
The reported impact is denial of service. No confidentiality or integrity impact is identified in the supplied severity vector.