PT-2026-71323

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server version 14.10 IBM Informix Dynamic Server version 15.0 Description A local privilege escalation issue exists in the oninit setuid-root utility. This allows a local user to gain elevated privileges on the system...

PT-2026-71267

Name of the Vulnerable Software and Affected Versions IBM Informix affected versions not specified Description Remote code execution is possible in the sq sgkprepare function due to an unchecked length field within the SQL Interface. Recommendations At the moment, there is no information about a...

Security Bulletin: IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility (CVE-2026-13367)

Summary A privilege escalation vulnerability exists in the oninit utility of IBM Informix Dynamic Server. Successful exploitation could allow a local authorized user to gain root privileges. Vulnerability Details CVEID:CVE-2026-13367 DESCRIPTION: IBM Informix Dynamic Server contain a local...

Security Bulletin: IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution (CVE-2026-13361)

Summary A remote code execution vulnerability exists in the SQL Interface component of IBM Informix Dynamic Server. An admitted SQL Interface client can send a specially crafted request to cause a stack-based buffer overflow. Vulnerability Details CVEID:CVE-2026-13361 DESCRIPTION: IBM Informix...

GHSA-XX22-P4CH-683R vulnerabilities

Vulnerabilities for packages: opensearch, wildfly, akhq, apicurio-registry, logstash, debezium-connector-ibmi, debezium, cassandra-reaper, strimzi-kafka-operator, sonarqube, debezium-connector-informix, debezium-connector-spanner, zipkin, druid, kafka, cassandra, apache-pulsar, spark,...

CVE-2026-59949 vulnerabilities

Vulnerabilities for packages: opensearch, wildfly, akhq, apicurio-registry, logstash, debezium-connector-ibmi, debezium, cassandra-reaper, strimzi-kafka-operator, sonarqube, debezium-connector-informix, debezium-connector-spanner, zipkin, druid, kafka, cassandra, apache-pulsar, spark,...

Security Bulletin: Multiple security vulnerabilities related to Angular and JJWT have been fixed in IBM Informix HQ 3.2.2.

Summary IBM Informix HQ versions before 3.2.2 are affected by several security flaws in third-party components Angular and JJWT. These vulnerabilities have been fixed in IBM Informix HQ 3.2.2. Vulnerability Details CVEID:CVE-2026-27970 DESCRIPTION: Angular is a development platform for building...

CVE-2026-35554 vulnerabilities

Vulnerabilities for packages: debezium-connector-informix, opensearch, wildfly, debezium, logstash, debezium-connector-spanner, strimzi-kafka-operator, thingsboard, debezium-connector-vitess, druid, debezium-connector-ibmi, apache-nifi, debezium-connector-db2...

GHSA-5QCV-4RPC-JP93 vulnerabilities

Vulnerabilities for packages: debezium-connector-informix, opensearch, wildfly, debezium, logstash, debezium-connector-spanner, strimzi-kafka-operator, thingsboard, debezium-connector-vitess, druid, debezium-connector-ibmi, apache-nifi, debezium-connector-db2...

CVE-2026-35554 vulnerabilities

Vulnerabilities for packages: apache-nifi, opensearch, strimzi-kafka-operator-fips, debezium-connector-ibmi, debezium-connector-informix, debezium, thingsboard, debezium-connector-db2, wildfly, debezium-connector-spanner, seata, opensearch-fips, knative-kafka-broker-fips, knative-kafka-broker,...

GHSA-5QCV-4RPC-JP93 vulnerabilities

Vulnerabilities for packages: apache-nifi, opensearch, strimzi-kafka-operator-fips, debezium-connector-ibmi, debezium-connector-informix, debezium, thingsboard, debezium-connector-db2, wildfly, debezium-connector-spanner, seata, opensearch-fips, knative-kafka-broker-fips, knative-kafka-broker,...

Security Bulletin: IBM Informix 12.10.xC16W6 updated to use the latest version of Java to address the Java vulnerabilities.

Summary IBM's Java version has been updated to 8.0.8.60 with Informix 12.10.xC16W6 to address multiple IBM Java vulnerabilities Vulnerability Details CVEID:CVE-2026-1188 DESCRIPTION: In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all...

Informix-INFORMIXDIR-bof-exploit

informix-informixdir-bof A root shell exploit for a stack-bas...

CVE-2025-1991

IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets...

CVE-2024-45675

IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password...

CVE-2024-45675

IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password...

CVE-2024-45675

IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password...

EUVD-2024-55112

IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password...

CVE-2024-45675 IBM Informix Dynamic Server Authentication Bypass

IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password...

CVE-2024-45675 IBM Informix Dynamic Server Authentication Bypass

IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password...