CVE-2026-105702

Undergoing Analysis Undergoing Analysis - In Progress

Information Disclosure in IBM Db2 Genius Hub

Publication date: 2026-11-04

Last updated on: 2026-11-04

Assigner: IBM Corporation

Description

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to exposure of error messages containing internal implementation details.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-11-04

Last Modified

2026-11-04

Generated

2026-11-05

AI Q&A

2026-11-05

EPSS Evaluated

N/A

NVD

CVE-2026-105702

EUVD

EUVD-2026-117113

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Db2 Genius Hub	1.1.2
IBM	Db2 Genius Hub	1.1.3
IBM	Db2 Genius Hub	1.1.4
IBM	Db2 Genius Hub	1.1.5

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-209	The product generates an error message that includes sensitive information about its environment, users, or associated data.

Attack-Flow Graph

Executive Summary

IBM Db2 Genius Hub versions 1.1.2 to 1.1.5 have a vulnerability where a remote authenticated attacker can access sensitive information. This happens because error messages expose internal implementation details that should not be visible.

Impact Analysis

This vulnerability may allow attackers to gather internal system details, which could be used to plan further attacks. It compromises confidentiality by leaking sensitive information to unauthorized parties.

Mitigation Strategies

Apply the latest IBM Db2 Genius Hub patch to address the information exposure issue. Ensure only authorized users have remote access and review error message handling to avoid exposing internal details.

Hi! I’m here to help you understand CVE-2026-105702. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...