CVEvulnerability
CVE-2026-8862
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-09-03
- Last modified
- 2026-09-10
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-522
Description
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code, configuration details, and other sensitive information.
Affected configurations
• ibm netezza performance server (< 11.3.1.3)
Related
Weakness · CWE (1)
- CWE-522 Insufficiently Protected Credentials weakness
References
- https://www.ibm.com/support/pages/node/7284359 Patch, Vendor Advisory