CVE-2026-109839: IBM DB2 Genius Hub

Low severity, CVSS 3.1. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm.

Affected products

• IBM DB2 Genius Hub: version 1.0 only

Published 2026-10-16. Last modified 2026-10-16.