CVE-2026-109838

IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of cryptographic signature. The vulnerability requires local access to the system.

A local attacker could obtain sensitive information, potentially leading to privilege escalation or further system compromise. The risk is particularly relevant in environments where many users have local access to the host.

Apply available IBM Db2 Genius Hub 1.0 updates as soon as they are released, and restrict local system access to trusted users. Consider auditing local permissions and monitoring for unusual cryptographic operations.