CVE-2026-14501
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
IBM Db2 Genius Hub (versions 1.1, 1.1.1, 1.1.2) and IBM Agentics 1.0 use dangerous functions without sufficient restrictions, potentially allowing an attacker to execute arbitrary code or obtain sensitive information.
Risk Assessment
An attacker can remotely execute arbitrary code or steal sensitive data, compromising system confidentiality and integrity.
Recommendation
Apply security patches from IBM or restrict access to vulnerable components.
Other vulnerabilities in IBM Db2 Genius Hub
See all- CVE-2026-109839Low
IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm.
- CVE-2026-109838Medium
IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of cryptographic signature. The vulnerability requires local access to the system.
Original NVD description (English source)
IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS