← Back

CVE-2026-13476

nvd nist
Published: Aug 12, 2026Modified: Aug 18, 2026

JSON object

Loading...
7.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Exploitability: 3.9 / Impact: 3.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.

Affected (3)

Ibm
1 product
Informix Dynamic Server
Configuration A
3 vulnerable · 8 platform
Vulnerable SoftwareAffected Versions
Ibm
Informix Dynamic Server
From 15.0 to 15.0.1.13
Informix Dynamic Server
Version 12.10
Informix Dynamic Server
Version 14.10
Running on/withPlatform Versions
Canonical
Ubuntu Linux
All versions
Hp
Hp Ux
All versions
Ibm
Aix
All versions
Ibm
Linux On Ibm Z
All versions
Linux
Linux Kernel
All versions
Novell
Suse Linux
All versions
Oracle
Solaris
All versions
Redhat
Desktop
All versions

Related CWEs

CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.