IBM Db2 Genius Hub vulnerabilities

3 known CVE vulnerabilities in IBM Db2 Genius Hub, translated and rated.

CVE-2026-109839Low
IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm.
CVE-2026-109838Medium
IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of cryptographic signature. The vulnerability requires local access to the system.
CVE-2026-14501Medium
IBM Db2 Genius Hub (versions 1.1, 1.1.1, 1.1.2) and IBM Agentics 1.0 use dangerous functions without sufficient restrictions, potentially allowing an attacker to execute arbitrary code or obtain sensitive information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS