{"id":"CVE-2026-109839","title":"IBM Db2 Genius Hub Missing Cryptographic Step","summary":"IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm.","severity":"low","cvss":3.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cvssSource":"cna","cwe":["CWE-325"],"vendor":"IBM","product":"Db2 Genius Hub","affected":["db2_genius_hub 1.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-16T19:23:24.091003Z"},"published":"2026-10-16","updated":"2026-10-16","sourceUpdated":"2026-10-16T19:23:47.475Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-109839","references":[{"url":"https://www.ibm.com/support/pages/node/7292486"}],"tags":["cve.org"],"ingestedAt":"2026-10-16T18:43:08.710Z","slug":"CVE-2026-109839","body":"## Overview\n\nIBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm.\n\n## Affected\n\n- `db2_genius_hub 1.0`\n\n## Remediation\n\nProduct\n\n\n\nVersion impacted\n\n\n\nRemediation\n\n\n\nIBM Db2 intelligence center (Db2gh)\n\n\n\n 1.0\n\n\n\nUpgrade to: IBM Db2 Genius Hub 1.1.0\n\n https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software&product=ibm/Information+Management/IBM+Db2+Genius+Hub&release=1.1.0.0&platform=All&function=all","depth":"sunlit","depthScore":17,"depthScoreParts":{"impact":17.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}