TLS Certificate Validation Flaw in IBM Netezza Software
CVE-2026-9036

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Netezza Software
Vendor
CVE Published:
3 September 2026

What is CVE-2026-9036?

The IBM Netezza Software version 11.3.0.3 and its Interim Fix 002 suffer from a security vulnerability due to improper validation of TLS certificates. This flaw can be exploited by attackers employing man-in-the-middle techniques, enabling them to intercept and potentially access sensitive information transmitted over affected systems. Organizations utilizing this software should promptly address the issue by implementing available patches and reviewing their security configurations to mitigate risk.

Affected Version(s)

Netezza Software 11.3.0.3

References

https://www.ibm.com/support/pages/node/7284359
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.