CVE-2026-116376

Published: Nov 4, 2026Modified: Nov 12, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishing attack due to an open redirect vulnerability.

Affected (5)

Products: Ibm: Agentics, Db2 Genius Hub

Ibm

2 products

Agentics

Db2 Genius Hub

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Agentics	Version 1.0
Ibm Db2 Genius Hub	Version 1.1.2
Ibm Db2 Genius Hub	Version 1.1.3
Ibm Db2 Genius Hub	Version 1.1.4
Ibm Db2 Genius Hub	Version 1.1.5

Related CWEs

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (1)

https://www.ibm.com/support/pages/node/7295187

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.