CVE-2026-13361

HighCVSS 8.8

Published: 12/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

20th percentile - higher than 20% of all known CVEs

Summary

IBM Informix oninit sq_sgkprepare has a remote code execution (RCE) vulnerability via an unchecked SQL Interface length field.

Risk Assessment

A remote attacker could exploit this vulnerability to execute arbitrary code on the database server, potentially leading to full system and data compromise.

Recommendation

Apply security patches from IBM for Informix and restrict access to the oninit service to trusted networks only.

Original NVD description (English source)

IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.