Security Bulletin: IBM Informix HQ is affected by multiple security vulnerabilities due to Hono (CVE-2026-54286, CVE-2026-54287, CVE-2026-54288, CVE-2026-54289, CVE-2026-54290).

Summary IBM Informix HQ is affected by multiple vulnerabilities in Hono. To address these vulnerabilities, IBM Informix HQ has been updated to the latest version of Hono. Vulnerability Details CVEID:CVE-2026-54286 DESCRIPTION: Hono is a Web application framework that provides support for any...

Security Bulletin: ACE vulnerability in conditional configuration file processing by QOS.CH logback-core

Summary Upgrade to new jsonListener.jar Vulnerability Details CVEID:CVE-2026-13006 DESCRIPTION: ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.36 in Java applications, allows an attacker to execute arbitrary code circumventing...

Security Bulletin: IBM Informix HQ is affected by multiple vulnerabilities in third-party libraries.

Summary Multiple security vulnerabilities in third-party and open-source dependencies affect IBM Informix HQ. These flaws include Denial of Service via memory exhaustion or inefficient regular expressions, host parser interpretation conflicts leading to potential SSRF/redirect bypass, cross-site...

Security Bulletin: IBM Informix HQ affected by Vulnerabilities (CVE-2026-6790, CVE-2025-11143, and CVE-2026-2332) in third-party library Jetty.

Summary IBM InformixHQ is affected by several vulnerabilities in Jetty. IBM InformixHQ has been updated to use the latest Jetty release. Vulnerability Details CVEID:CVE-2026-6790 DESCRIPTION: In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request...

Security Bulletin: IBM Informix Wire Listener is affected by a vulnerability in the third-party Netty library (CVE-2026-59900).

Summary IBM Informix Wire Listener is affected by CVE-2026-59900. To address this issue, Netty has been updated to the latest version in IBM Informix versions 14.10.xC14 and 15.0.1.14. Vulnerability Details CVEID:CVE-2026-59900 DESCRIPTION: Netty is an asynchronous, event-driven network applicati...

IBM Informix Dynamic Server 12.10.x / 14.10.x < 14.10.xC13W13 / 15.0.x < 15.0.1.13 RCE (7282827)

The version of IBM Informix Dynamic Server installed on the remote host is 12.10.x, or 14.10.x prior to 14.10.xC13W13, or 15.0.x prior to 15.0.1.13. It is, therefore, affected by a remote code execution vulnerability in the IBM Informix Wire Listener as referenced in the 7282827 vendor advisory. ...

CVE-2026-13476

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...

CVE-2026-13476 IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...

CVE-2026-13476

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...

CVE-2026-13476

IBM Informix Wire Listener vulnerability CVE-2026-13476 affects IBM Informix Dynamic Server versions 12.10, 14.10, and 15.0. An unauthenticated user could execute arbitrary commands with the system service account due to improper validation of user input, enabling remote code execution (RCE). CVS...

EUVD-2026-57627

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...

CVE-2026-13367 IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

EUVD-2026-57623

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

CVE-2026-13367

IBM Informix Dynamic Server versions 14.10 and 15.0 are affected by a local privilege escalation in the oninit setuid-root utility (CVE-2026-13367). The root cause is improper access control in the oninit binary, enabling a local, non-remote attacker with low privileges to gain root privileges. C...

CVE-2026-13367 IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

CVE-2026-13367

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

CVE-2026-13361

IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...

CVE-2026-13361 IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution

IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...

CVE-2026-13361 IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution

IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...

CVE-2026-13361

IBM Informix Dynamic Server is affected by CVE-2026-13361 through the oninit sq_sgkprepare path, enabling a stack-based buffer overflow via an unchecked SQL Interface length field, leading to remote code execution. Affected versions: Informix Dynamic Server 14.10, 12.10.x, and 15.0. The issue has...