5.9
Medium
CVE-2026-110281 Multiple vulnerabilities that affects IBM Db2 Genius Hub
Description
IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle technique.
CVSS 3.1 detail
Vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitable remotely over the network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Network
- Attack complexity
- High
- Privileges required
- None
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Db2 Genius Hub 1.1 | 1.1.2 → 1.1.5 | No fix stated |
Other CVEs of Db2 Genius Hub
The 14 CVEs of Db2 Genius Hub →
CVE-2026-105702
Multiple vulnerabilities that affects IBM Db2 Genius Hub
4.3
Medium
CVE-2026-105991
Multiple vulnerabilities that affects IBM Db2 Genius Hub
3.5
Low
CVE-2026-108536
Multiple vulnerabilities that affects IBM Db2 Genius Hub
4.6
Medium
CVE-2026-108588
Multiple vulnerabilities that affects IBM Db2 Genius Hub
5.4
Medium