CVEvulnerability
CVE-2026-13476
7.3 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-08-12
- Last modified
- 2026-10-23
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Weaknesses
- CWE-78
Description
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.
Affected configurations
• ibm informix dynamic server (>= 15.0 < 15.0.1.13)
• ibm informix dynamic server 12.10
• ibm informix dynamic server 14.10
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://www.ibm.com/support/pages/node/7282827 Vendor Advisory