CVE-2026-105702

MediumCVSS 4.3/10Last modified Nov 12, 2026

Description

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to exposure of error messages containing internal implementation details.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

Affected software

VendorProductVersions
IBMDb2 Genius Hub1.1.2; 1.1.3; 1.1.4; 1.1.5

References

Timeline

Published
Nov 4, 2026
Last modified
Nov 12, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-1057034.7A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown fuCVE-2026-1057047.3A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth GuarCVE-2026-1057054.3A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/addCVE-2026-1057064.3A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation cCVE-2026-1057075.3A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pCVE-2026-1057084.3A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svCVE-2026-105715.3IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. CVE-2026-1057113.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 thCVE-2026-1057123.6gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directoryCVE-2026-1057135.7Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent networkCVE-2026-1057147.5Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.CVE-2026-1057157.5Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-105702: Medium severity, CVSS 4.3 | Vulnix