CVE-2026-116376: Multiple vulnerabilities that affects IBM Db2 Genius Hub
IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishing attack due to an open redirect vulnerability.
Other sources
IBM Db2 Genius Hub could allow a remote authenticated attacker to conduct a phishing attack due to an open redirect vulnerability.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2 Genius Hubto a version that resolves this vulnerability.Fixed in 1.1.6
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker must be remotely authenticated and must persuade a user to interact with a crafted redirect, as indicated by the required user interaction in the CVSS vector.
Which releases are identified as affected?
IBM Db2 Genius Hub versions 1.1.2, 1.1.3, 1.1.4, and 1.1.5 are listed as affected.
What is the expected impact?
The issue enables phishing through an open redirect and is rated low severity. The CVSS vector indicates low confidentiality impact, with no integrity or availability impact.