IBM Db2 Genius Hub 1.x Arbitrary Code Exec & Info Leak via Unsafe Functions
CVE-2026-14501 Published on July 17, 2026
Use of Potentially Dangerous Functionthat in IBM Db2 Genius Hub
IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions.
Vulnerability Analysis
CVE-2026-14501 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity, and no impact on availability.
Weakness Type
Use of Potentially Dangerous Function
The program invokes a potentially dangerous function that could introduce a vulnerability if it is used incorrectly, but the function can also be used safely.
Products Associated with CVE-2026-14501
stack.watch emails you whenever new vulnerabilities are published in IBM Db2 Genius Hub or IBM Agentics. Just hit a watch button to start following.
Affected Versions
IBM Db2 Genius Hub:- Version 1.1, 1.1.1, 1.1.2 is affected.
- Version 1.0 is affected.