CVE-2026-105991 PUBLISHED

Multiple vulnerabilities that affects IBM Db2 Genius Hub

Assigner: ibm
Reserved: 06.10.2026 Published: 04.11.2026 Updated: 04.11.2026

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to a missing Content Security Policy header.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS Score: 3.5

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	Low
Privileges Required	Low	Integrity Impact	None
User Interaction	Required	Availability Impact	None

CVSS 3.1

Product Status

Vendor	IBM
Product	Db2 Genius Hub
Versions	Version 1.1.2 is affected Version 1.1.3 is affected Version 1.1.4 is affected Version 1.1.5 is affected

Solutions

Product Version impacted Remediation IBM Db2 Genius Hub & Agentics 1.1.2, 1.1.3, 1.1.4, 1.1.5 Upgrade to: IBM Db2 Genius Hub 1.1.6 https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Information+Management/IBM+Db2+Genius+Hub&release=1.1.6.0&platform=All&function=all

References

https://www.ibm.com/support/pages/node/7295187

Problem Types

CWE-693 Protection Mechanism Failure CWE