What’s Vulnerable › Vulnerabilities
CVE-2026-14501: Use of Potentially Dangerous Functionthat in IBM Db2 Genius Hub
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-07-17 · updated 2026-08-11
- Weakness: CWE-676
Description
IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions.
Affected products
- IBM Agentics: 1.0
- IBM Db2 Genius Hub: from 1.1 before 1.1.3 — fixed in 1.1.3
How to fix
Upgrade to a fixed version: IBM Db2 Genius Hub 1.1.3. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-14501 or the next vulnerability affects your stack