IBM Db2 Genius Hub Remote Code Execution Vulnerability

Publication date: 2026-07-17

Last updated on: 2026-07-17

Assigner: IBM Corporation

Description

IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-17

Last Modified

2026-07-17

Generated

2026-07-18

AI Q&A

2026-07-18

EPSS Evaluated

N/A

NVD

CVE-2026-14501

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	db2_genius_hub	1.1
ibm	db2_genius_hub	1.1.1
ibm	db2_genius_hub	1.1.2
ibm	agentics	1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-676	The product invokes a potentially dangerous function that could introduce a vulnerability if it is used incorrectly, but the function can also be used safely.

Attack-Flow Graph

Executive Summary

IBM Db2 Genius Hub versions 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 contain a flaw where dangerous functions are used without proper restrictions. This could allow an attacker to execute arbitrary code or access sensitive information on affected systems.

Impact Analysis

An attacker could exploit this to run malicious code on your system or steal confidential data. The impact depends on system access levels, but could lead to data breaches or system compromise.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Non-compliance risks include fines and legal penalties.

Hi! I’m here to help you understand CVE-2026-14501. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70