---
id: CVE-2026-9744
title: >-
  IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or
  improperly validates TLS certificate validation, which could allow an attacker
  to obtain sensitive information using man in the middle techniques.
summary: >-
  IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or
  improperly validates TLS certificate validation, which could allow an attacker
  to obtain sensitive information using man in the middle techniques.
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
cwe:
  - CWE-297
vendor: ibm
product: netezza_performance_server
affected:
  - netezza_performance_server < 11.3.1.3
patched:
  - netezza_performance_server 11.3.1.3
published: '2026-09-03'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T20:34:10.137'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-9744'
references:
  - url: 'https://www.ibm.com/support/pages/node/7284359'
    label: psirt@us.ibm.com
tags:
  - nvd
epss: 0.00109
epssPercentile: 0.01405
ingestedAt: '2026-09-08T15:33:26.959Z'
---

## Overview

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.

## Affected

- `netezza_performance_server < 11.3.1.3`

## Remediation

Upgrade past the affected range:

- `netezza_performance_server 11.3.1.3`