CVE-2026-13476
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges due to improper validation of user supplied input.
Risk Assessment
An unauthenticated attacker could execute arbitrary commands on the server with service privileges, potentially leading to full compromise of the database system.
Recommendation
Apply security patches from IBM and restrict access to the Informix server to trusted networks only.
Other vulnerabilities in IBM Informix Dynamic Server
See all- CVE-2016-0226High
The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the nsrd, nsrexecd, and portmap executable files, allowing local users to gain privileges via a Trojan horse file.
- CVE-2026-13367High
IBM Informix Dynamic Server 14.10 and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.
- CVE-2024-45675High
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password.
Original NVD description (English source)
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS