CVE-2026-116376 PUBLISHED

Multiple vulnerabilities that affects IBM Db2 Genius Hub

Assigner: ibm
Reserved: 26.10.2026 Published: 04.11.2026 Updated: 04.11.2026

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishing attack due to an open redirect vulnerability.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
CVSS Score: 3.4

Attack Vector	Adjacent Network	Scope	Changed
Attack Complexity	Low	Confidentiality Impact	Low
Privileges Required	Low	Integrity Impact	None
User Interaction	Required	Availability Impact	None

CVSS 3.1

Product Status

Vendor	IBM
Product	Db2 Genius Hub
Versions	Version 1.1.2 is affected Version 1.1.3 is affected Version 1.1.4 is affected Version 1.1.5 is affected

Solutions

Product

Version impacted

Remediation

IBM Db2 Genius Hub & Agentics

1.1.2, 1.1.3, 1.1.4, 1.1.5

Upgrade to: IBM Db2 Genius Hub 1.1.6 https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Information+Management/IBM+Db2+Genius+Hub&release=1.1.6.0&platform=All&function=all

References

https://www.ibm.com/support/pages/node/7295187

Problem Types

CWE-601 URL Redirection to Untrusted Site CWE