{"id":"CVE-2026-116376","title":"Multiple vulnerabilities that affects IBM Db2 Genius Hub","summary":"IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishing attack due to an open redirect vulnerability.","severity":"low","cvss":3.4,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","cvssSource":"cna","cwe":["CWE-601"],"vendor":"IBM","product":"Db2 Genius Hub","affected":["db2_genius_hub 1.1.2","db2_genius_hub 1.1.3","db2_genius_hub 1.1.4","db2_genius_hub 1.1.5"],"published":"2026-11-04","updated":"2026-11-04","sourceUpdated":"2026-11-04T20:57:58.737Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116376","references":[{"url":"https://www.ibm.com/support/pages/node/7295187"}],"tags":["cve.org"],"ingestedAt":"2026-11-05T21:36:00.574Z","epss":0.00203,"epssPercentile":0.10326,"slug":"CVE-2026-116376","body":"## Overview\n\nIBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishing attack due to an open redirect vulnerability.\n\n## Affected\n\n- `db2_genius_hub 1.1.2`\n- `db2_genius_hub 1.1.3`\n- `db2_genius_hub 1.1.4`\n- `db2_genius_hub 1.1.5`\n\n## Remediation\n\nProduct\n\n\n\nVersion impacted\n\n\n\nRemediation\n\n\n\nIBM Db2 Genius Hub & Agentics\n\n\n\n 1.1.2, 1.1.3, 1.1.4, 1.1.5\n\n\n\nUpgrade to: IBM Db2 Genius Hub 1.1.6\n https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Information+Management/IBM+Db2+Genius+Hub&release=1.1.6.0&platform=All&function=all","depth":"sunlit","depthScore":19,"depthScoreParts":{"impact":18.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}