CVE-2026-14501

9.8 criticalEPSS 0.5%

IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-676
Published: 2026-07-17
Modified: 2026-08-11
Record from: the NVD, synced 2026-10-19

Affected

ibm:agentics
ibm:db2_genius_hub

References

https://www.ibm.com/support/pages/node/7279901

Check your stack JSON