CVE-2026-9041: Path Traversal

Q: What access would an attacker need to exploit this issue?

The issue is described as remotely exploitable through manipulation of the path component of a URL used in server-side requests. The provided information does not state whether authentication or any particular application feature is required.

Q: What resources could be exposed?

An attacker may be able to make the server access unintended internal endpoints or sensitive data. The provided information does not identify specific endpoints, services, or data types.

Published Aug 20, 2026

Updated

IBM Netezza Software could allow a remote attacker to access unauthorized resources due to improper validation of user-supplied input in server-side requests. A path traversal server-side request forgery (SSRF) vulnerability exists where an attacker can manipulate the path component of a URL in server-side requests, allowing access to unintended internal endpoints or sensitive data.

Affected Software

1 affected component

IBM Netezza Software<=11.3.0.3-IF2

Event History

Aug 20, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7284359

Frequently Asked Questions

What access would an attacker need to exploit this issue?

The issue is described as remotely exploitable through manipulation of the path component of a URL used in server-side requests. The provided information does not state whether authentication or any particular application feature is required.

What resources could be exposed?

An attacker may be able to make the server access unintended internal endpoints or sensitive data. The provided information does not identify specific endpoints, services, or data types.