7.3
High
CVE-2026-13476 IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands…
Description
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Informix Dynamic Server | 15.0 | No fix stated |
| Informix Dynamic Server | 14.10 | No fix stated |
| Informix Dynamic Server | 12.10 | No fix stated |
Other CVEs of Informix Dynamic Server
The 12 CVEs of Informix Dynamic Server →
CVE-2026-13367
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root…
7.8
High
CVE-2026-13361
IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field
8.8
High
CVE-2024-45675
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as…
8.4
High
CVE-2024-49343
IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection
5.4
Medium