Vulnerability record/PUBLISHED/Published Nov 4, 2026 20:59:08 UTC

CVE-2026-105991

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to a missing Content Security Policy header.

Base score3.5/ 10

SeverityLowCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityLow

Attack vectorNetworkAV

Attack complexityLowAC

Privileges requiredLowPR

User interactionRequiredUI

ScopeUnchangedS

Confidentiality impactLowC

Integrity impactNoneI

Availability impactNoneA

CVSS vector stringCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityibm

Last updatedNov 8, 2026 01:49:40 UTC

PublishedNov 4, 2026 20:59:08 UTC

ReservedOct 6, 2026 11:01:50 UTC