{"id":"CVE-2026-8862","title":"IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry","summary":"IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private contain…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-522"],"vendor":"ibm","product":"netezza_performance_server","affected":["netezza_performance_server < 11.3.1.3"],"patched":["netezza_performance_server 11.3.1.3"],"published":"2026-09-03","updated":"2026-09-10","sourceUpdated":"2026-09-10T20:38:54.823","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-8862","references":[{"url":"https://www.ibm.com/support/pages/node/7284359","label":"psirt@us.ibm.com"}],"tags":["nvd"],"epss":0.00232,"epssPercentile":0.14358,"ingestedAt":"2026-09-08T15:33:26.958Z","slug":"CVE-2026-8862","body":"## Overview\n\nIBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code, configuration details, and other sensitive information.\n\n## Affected\n\n- `netezza_performance_server < 11.3.1.3`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `netezza_performance_server 11.3.1.3`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}