IBM Netezza Appliance 11.3.0.2 IF00211.3.1.3 IF006 Auth Bypass (Pwd Change)
CVE-2026-16699 Published on November 8, 2026
Vulnerability exists in IBM Netezza Appliance
IBM Netezza Appliance 11.3.0.2 Interim Fix 002 through 11.3.1.3 Interim Fix 006 could allow a remote authenticated attacker to change the passwords of other users due to improper authorization.
Vulnerability Analysis
CVE-2026-16699 can be exploited with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.
Weakness Type
What is an AuthZ Vulnerability?
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CVE-2026-16699 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2026-16699
Want to know whenever a new CVE is published for IBM Netezza Appliance? stack.watch will email you.
Affected Versions
IBM Netezza Appliance:- Version 11.3.0.2 IF2, <= 11.3.1.3 IF 6 is affected.