CVE-2026-8862

Received Received - Intake

Hard-Coded Credentials in IBM Netezza Software

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: IBM Corporation

Description

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code, configuration details, and other sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-03

Generated

2026-09-04

AI Q&A

2026-09-04

EPSS Evaluated

N/A

NVD

CVE-2026-8862

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	netezza	11.3.0.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-522	The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

Executive Summary

IBM Netezza Software versions 11.3.0.3 through Interim Fix 002 contain hardcoded credentials in the application source code. This allows unauthorized users to access the container registry and pull private container images, potentially exposing proprietary code, configurations, and sensitive data.

Impact Analysis

Attackers could exploit this to gain unauthorized access to private container images, leading to exposure of proprietary software, internal configurations, or sensitive information. This may result in data breaches, intellectual property theft, or further network compromise depending on the contents of the images.

Compliance Impact

This vulnerability could lead to unauthorized access and exposure of sensitive data, violating compliance requirements such as GDPR (data protection) and HIPAA (health information privacy). Organizations may face legal penalties, fines, or reputational damage due to non-compliance resulting from this breach.

Mitigation Strategies

Update IBM Netezza Software to a version that removes hardcoded credentials. Remove any exposed secrets from container registry access. Restrict network access to the container registry to prevent unauthorized pulls.

Hi! I’m here to help you understand CVE-2026-8862. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70