CVE-2026-110282

Undergoing Analysis Undergoing Analysis - In Progress

Remote Authentication Bypass in IBM Db2 Genius Hub

Publication date: 2026-11-04

Last updated on: 2026-11-04

Assigner: IBM Corporation

Description

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to improper access control.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-11-04

Last Modified

2026-11-04

Generated

2026-11-05

AI Q&A

2026-11-05

EPSS Evaluated

N/A

NVD

CVE-2026-110282

EUVD

EUVD-2026-117105

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Db2 Genius Hub	1.1.2
IBM	Db2 Genius Hub	1.1.3
IBM	Db2 Genius Hub	1.1.4
IBM	Db2 Genius Hub	1.1.5

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

IBM Db2 Genius Hub versions 1.1.2 through 1.1.5 have an improper access control flaw. A remote authenticated attacker could exploit this to bypass security restrictions.

Impact Analysis

An attacker could gain unauthorized access to sensitive data or perform actions beyond their intended permissions due to the bypass of security controls.

Compliance Impact

This vulnerability may lead to unauthorized data access, potentially violating compliance requirements for data protection and privacy regulations like GDPR and HIPAA.

Mitigation Strategies

Apply the latest security patches or updates provided by IBM for IBM Db2 Genius Hub to address the improper access control issue. Ensure proper access controls are enforced and restrict remote authenticated access to authorized users only.

Hi! I’m here to help you understand CVE-2026-110282. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...