Vulnerability record/PUBLISHED/Published Nov 4, 2026 20:57:58 UTC

CVE-2026-116376

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishing attack due to an open redirect vulnerability.

Base score3.4/ 10

SeverityLowCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityLow

Attack vectorAdjacentAV

Attack complexityLowAC

Privileges requiredLowPR

User interactionRequiredUI

ScopeChangedS

Confidentiality impactLowC

Integrity impactNoneI

Availability impactNoneA

CVSS vector stringCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityibm

Last updatedNov 8, 2026 01:49:40 UTC

PublishedNov 4, 2026 20:57:58 UTC

ReservedOct 26, 2026 09:11:36 UTC