CVE-2026-13476 (GCVE-0-2026-13476)

Vulnerability from cvelistv5 – Published: 2026-08-12 20:58 – Updated: 2026-08-14 22:16
VLAI
Title
IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution
Summary
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.
Severity
7.3 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
SSVC
Exploitation: none Automatable: yes Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-14 22:16 UTC
CWE
  • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
ibm
References
URL Tags
https://www.ibm.com/support/pages/node/7282827 vendor-advisorypatch
Impacted products
Vendor Product Version
IBM Informix Dynamic Server Affected: 14.10
Affected: 15.0
Affected: 12.10
    cpe:2.3:a:ibm:informix_dynamic_server:14.10:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:14.10.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:15.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:15.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:12.10:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:informix_dynamic_server:12.10.0:*:*:*:*:*:*:*
 Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-13476",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T22:16:14.270959Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T22:16:24.859Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:informix_dynamic_server:14.10:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:informix_dynamic_server:14.10.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:informix_dynamic_server:15.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:informix_dynamic_server:15.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:informix_dynamic_server:12.10:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:informix_dynamic_server:12.10.0:*:*:*:*:*:*:*"
          ],
          "product": "Informix Dynamic Server",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "14.10"
            },
            {
              "status": "affected",
              "version": "15.0"
            },
            {
              "status": "affected",
              "version": "12.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.\u003c/p\u003e"
            }
          ],
          "value": "IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-12T21:01:16.803Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7282827"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe vulnerability has been resolved in IBM Informix versions 14.10.xC13W13 and 15.0.1.13. The fix can be found on\u00a0\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?function=all\u0026amp;parent=ibm~Information%20Management\u0026amp;platform=All\u0026amp;product=ibm%2FInformation%20Management%2FInformix\u0026amp;release=All\u0026amp;mhsrc=ibmsearch_a\u0026amp;mhq=Informix\" rel=\"noopener noreferrer nofollow\"\u003eIBM Fix Central under the Informix Server section\u003c/a\u003e.\u003c/p\u003e"
            }
          ],
          "value": "The vulnerability has been resolved in IBM Informix versions 14.10.xC13W13 and 15.0.1.13. The fix can be found on IBM Fix Central under the Informix Server section."
        }
      ],
      "title": "IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-13476",
    "datePublished": "2026-08-12T20:58:16.282Z",
    "dateReserved": "2026-06-27T02:18:22.491Z",
    "dateUpdated": "2026-08-14T22:16:24.859Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-13476",
      "date": "2026-08-15",
      "epss": "0.00549",
      "percentile": "0.43369"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-13476\",\"sourceIdentifier\":\"psirt@us.ibm.com\",\"published\":\"2026-08-12T21:17:35.510\",\"lastModified\":\"2026-08-14T23:16:31.520\",\"vulnStatus\":\"Undergoing Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.\"}],\"affected\":[{\"source\":\"psirt@us.ibm.com\",\"affectedData\":[{\"vendor\":\"IBM\",\"product\":\"Informix Dynamic Server\",\"cpes\":[\"cpe:2.3:a:ibm:informix_dynamic_server:14.10:*:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:informix_dynamic_server:14.10.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:informix_dynamic_server:15.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:informix_dynamic_server:15.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:informix_dynamic_server:12.10:*:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:informix_dynamic_server:12.10.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"14.10\",\"status\":\"affected\"},{\"version\":\"15.0\",\"status\":\"affected\"},{\"version\":\"12.10\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":3.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-14T22:16:14.270959Z\",\"id\":\"CVE-2026-13476\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-78\"}]}],\"references\":[{\"url\":\"https://www.ibm.com/support/pages/node/7282827\",\"source\":\"psirt@us.ibm.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-13476\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-14T22:16:14.270959Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-14T22:16:20.933Z\"}}], \"cna\": {\"title\": \"IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"LOW\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:ibm:informix_dynamic_server:14.10:*:*:*:*:*:*:*\", \"cpe:2.3:a:ibm:informix_dynamic_server:14.10.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:ibm:informix_dynamic_server:15.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:ibm:informix_dynamic_server:15.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:ibm:informix_dynamic_server:12.10:*:*:*:*:*:*:*\", \"cpe:2.3:a:ibm:informix_dynamic_server:12.10.0:*:*:*:*:*:*:*\"], \"vendor\": \"IBM\", \"product\": \"Informix Dynamic Server\", \"versions\": [{\"status\": \"affected\", \"version\": \"14.10\"}, {\"status\": \"affected\", \"version\": \"15.0\"}, {\"status\": \"affected\", \"version\": \"12.10\"}]}], \"solutions\": [{\"lang\": \"en\", \"value\": \"The vulnerability has been resolved in IBM Informix versions 14.10.xC13W13 and 15.0.1.13. The fix can be found on IBM Fix Central under the Informix Server section.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eThe vulnerability has been resolved in IBM Informix versions 14.10.xC13W13 and 15.0.1.13. The fix can be found on\\u00a0\u003ca href=\\\"https://www.ibm.com/support/fixcentral/swg/selectFixes?function=all\u0026amp;parent=ibm~Information%20Management\u0026amp;platform=All\u0026amp;product=ibm%2FInformation%20Management%2FInformix\u0026amp;release=All\u0026amp;mhsrc=ibmsearch_a\u0026amp;mhq=Informix\\\" rel=\\\"noopener noreferrer nofollow\\\"\u003eIBM Fix Central under the Informix Server section\u003c/a\u003e.\u003c/p\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.ibm.com/support/pages/node/7282827\", \"tags\": [\"vendor-advisory\", \"patch\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eIBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-78\", \"description\": \"CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"9a959283-ebb5-44b6-b705-dcc2bbced522\", \"shortName\": \"ibm\", \"dateUpdated\": \"2026-08-12T21:01:16.803Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-13476\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-14T22:16:24.859Z\", \"dateReserved\": \"2026-06-27T02:18:22.491Z\", \"assignerOrgId\": \"9a959283-ebb5-44b6-b705-dcc2bbced522\", \"datePublished\": \"2026-08-12T20:58:16.282Z\", \"assignerShortName\": \"ibm\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.