CVE-2026-13367
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
IBM Informix Dynamic Server 14.10 and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.
Risk Assessment
A local user could escalate privileges to root, potentially leading to full system compromise.
Recommendation
Apply security patches from IBM and restrict access to the oninit utility to trusted users only.
Other vulnerabilities in IBM Informix Dynamic Server
See all- CVE-2016-0226High
The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the nsrd, nsrexecd, and portmap executable files, allowing local users to gain privileges via a Trojan horse file.
- CVE-2026-13476High
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges due to improper validation of user supplied input.
- CVE-2024-45675High
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password.
Original NVD description (English source)
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS