[ CVE-2026-108767 · Published 4 Nov 2026 ]
Vulnerability in IBM Db2 Genius Hub
CVSS 4.3
No fix listed yet
[ Description ]Official description
IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct HTTP response splitting due to improper neutralization of HTTP headers.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.