CVE-2026-13361 IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field

Description

IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.

Affected products and versions

Product	Affected versions	Fixed in
Informix Dynamic Server	15.0	No fix stated
Informix Dynamic Server	14.10	No fix stated
Informix Dynamic Server	12.10.x	No fix stated

Other CVEs of Informix Dynamic Server

The 12 CVEs of Informix Dynamic Server →

CVE-2026-13476 IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands… 7.3 High CVE-2026-13367 IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root… 7.8 High CVE-2024-45675 IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as… 8.4 High CVE-2024-49343 IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection 5.4 Medium