Open Redirect Vulnerability in IBM Db2 Genius Hub Products
CVE-2026-116376

3.4LOW

Key Information:

Vendor

IBM
Status
Db2 Genius Hub
Vendor
CVE Published:
4 November 2026

What is CVE-2026-116376?

IBM Db2 Genius Hub versions 1.1.2 to 1.1.5 are susceptible to an open redirect vulnerability that could allow a remote, authenticated attacker to carry out phishing attacks. This security flaw can be exploited to mislead users into visiting malicious sites, potentially compromising sensitive information. Users are advised to apply patches as they become available to mitigate this risk.

Affected Version(s)

Db2 Genius Hub 1.1.2

Db2 Genius Hub 1.1.3

Db2 Genius Hub 1.1.4

References

https://www.ibm.com/support/pages/node/7295187
vendor-advisorypatch

CVSS V3.1

Score:
3.4
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.