CVE-2026-110283
Undergoing Analysis Undergoing Analysis - In Progress

Denial of Service in IBM Db2 Genius Hub

Publication date: 2026-11-04

Last updated on: 2026-11-04

Assigner: IBM Corporation

Description
IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to cause a denial of service due to improper validation of user-influenced resource identifiers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-04
Last Modified
2026-11-04
Generated
2026-11-05
AI Q&A
2026-11-04
EPSS Evaluated
N/A
NVD
CVE-2026-110283
EUVD
EUVD-2026-117104

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
IBM Db2 Genius Hub 1.1.2
IBM Db2 Genius Hub 1.1.3
IBM Db2 Genius Hub 1.1.4
IBM Db2 Genius Hub 1.1.5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-99 The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in IBM Db2 Genius Hub versions 1.1.2 to 1.1.5 allows a remote authenticated attacker to cause a denial of service by exploiting improper validation of user-controlled resource identifiers.

Impact Analysis

An attacker could exploit this flaw to disrupt services by making the application unavailable to legitimate users, potentially leading to downtime and loss of access to critical functions.

Compliance Impact

This vulnerability could lead to a denial of service due to improper validation of resource identifiers, potentially disrupting data availability. This may impact compliance with standards requiring data availability and integrity, such as GDPR or HIPAA, by risking unauthorized disruptions to systems handling sensitive data.

Mitigation Strategies

Apply the latest IBM Db2 Genius Hub patches or updates to address improper validation of resource identifiers. Ensure only authenticated users have access to the system and restrict unnecessary network exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-110283. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...