CVE-2026-109839
LowCVSS 3.1Summary
IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm.
Risk Assessment
A remote authenticated attacker could bypass security restrictions, potentially leading to unauthorized access or data disclosure. The missing initialization vector weakens cryptographic security.
Recommendation
Update IBM Db2 Genius Hub to a patched version or contact the vendor for guidance. Until patched, restrict remote access and monitor for suspicious activity.
Other vulnerabilities in IBM Db2 Genius Hub
See all- CVE-2026-109838Medium
IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of cryptographic signature. The vulnerability requires local access to the system.
- CVE-2026-14501Medium
IBM Db2 Genius Hub (versions 1.1, 1.1.1, 1.1.2) and IBM Agentics 1.0 use dangerous functions without sufficient restrictions, potentially allowing an attacker to execute arbitrary code or obtain sensitive information.
Original NVD description (English source)
IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS