Db2 Genius Hub vulnerabilities and CVEs

Known vulnerabilities affecting Db2 Genius Hub, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.

11 vulnerabilities tracked.

6.5 IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to improper… CVE-2026-110282 4 Nov 2026
5.9 IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could allow an attacker to obtain… CVE-2026-110281 4 Nov 2026
5.4 IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to a missing… CVE-2026-108588 4 Nov 2026
4.6 IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to improper… CVE-2026-108536 4 Nov 2026
4.3 IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to exposure… CVE-2026-105702 4 Nov 2026
4.3 IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct HTTP response splitting due to… CVE-2026-108767 4 Nov 2026
4.3 IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to missing… CVE-2026-108910 4 Nov 2026
4.3 IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to cause a denial of service due to improper… CVE-2026-110283 4 Nov 2026
3.5 IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to a missing… CVE-2026-105991 4 Nov 2026
3.4 IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishing attack due to an open… CVE-2026-116376 4 Nov 2026
3.3 IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to uncontrolled resource… CVE-2026-108838 4 Nov 2026

What this covers

This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Db2 Genius Hub is free of vulnerabilities.

Query this from an agent over MCP · Check a lockfile by version

Other products tracked here