CVE-2026-14501Use of Potentially Dangerous Functionthat in IBM Db2 Genius Hub

IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions.

9.8 CRITICALEPSS 0.45%Not in KEVNVD: Analyzed

Last updated: 2026-08-11 23:17 UTC

OverviewCVSS details

9.8CRITICALCVSS 3.1

Score source: NVD
NVD status: Analyzed
Published: Jul 17, 2026
Assigner: ibm

Affected

Db2 Genius Hub (IBM)

Versions: 1.1, 1.1.1, 1.1.2

+1 more product →

Exploitation

Public exploit: None listed
CISA KEV: Not listed
KEV due date: —
SSVC: Exploitation none · Automatable no · Impact partial

EPSS · FIRST, scored Nov 7

0.45%chance of exploitation in 30 days

Higher than 40.04% of CVEs

CVSS 3.1 · NVD

9.8Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality impact: High
Integrity impact: High
Availability impact: High

CVSS 3.1 · ibm (CNA)

4.3Medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack vector: Network
Attack complexity: Low
Privileges required: Low
User interaction: None
Scope: Unchanged
Confidentiality impact: None
Integrity impact: Low
Availability impact: None

NVD status: Analyzed

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
9.8	CRITICAL	3.1NVD	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4.3	MEDIUM	3.1ibm (CNA)	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

CVE ID: CVE-2026-14501
Status: Analyzed
Assigner (CNA): ibm
Published: Jul 17, 2026
Last modified: 2026-08-11 23:17 UTC
Weaknesses: CWE-676 · Use of Potentially Dangerous Function

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 08:31 UTC.