CVE-2026-13476: IBM Informix Dynamic Server

High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.

Affected products

• IBM Informix Dynamic Server: from 15.0, before 15.0.1.13 (fixed in 15.0.1.13); version 12.10 only; version 14.10 only

Published 2026-08-12. Last modified 2026-08-18.