CVE-2026-110281Medium· 5.9▾ SunlitIBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle technique.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle technique.
db2_genius_hub 1.1.2db2_genius_hub 1.1.3db2_genius_hub 1.1.4db2_genius_hub 1.1.5Product Version impacted Remediation IBM Db2 Genius Hub & Agentics 1.1.2, 1.1.3, 1.1.4, 1.1.5 Upgrade to: IBM Db2 Genius Hub 1.1.6 https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Information+Management/IBM+Db2+Genius+Hub&release=1.1.6.0&platform=All&function=all
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-105702Medium· 4.3Multiple vulnerabilities that affects IBM Db2 Genius Hub
CVE-2026-105991Low· 3.5Multiple vulnerabilities that affects IBM Db2 Genius Hub
CVE-2026-108588Medium· 5.4Multiple vulnerabilities that affects IBM Db2 Genius Hub
CVE-2026-108536Medium· 4.6Multiple vulnerabilities that affects IBM Db2 Genius Hub
CVE-2026-108910Medium· 4.3Multiple vulnerabilities that affects IBM Db2 Genius Hub
CVE-2026-108838Low· 3.3Multiple vulnerabilities that affects IBM Db2 Genius Hub