AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-13367

IBM Informix Dynamic Server: privilege escalation

IBM

CVE-2026-13367 · Published Aug 12, 2026 · updated Aug 18, 2026

High7.8
No fix yet
IBM advisory

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.

Affected versions

PackageAffectedFixed in
Informix Dynamic Server
Product
<= 14.10No fix yet
<= 15.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-284

More IBM advisories

All IBM
Medium 4.2Aug 12IBM DataPower Gateway: race conditionCVE-2026-7366no fix yetHigh 8.4Aug 12IBM Db2: buffer overflowCVE-2026-10534no fix yetHigh 8.2Aug 12IBM i: denial of serviceCVE-2026-17485no fix yetCritical 10.0Aug 12IBM DOORS Next: improper authenticationCVE-2024-27253no fix yetMedium 4.3Aug 12IBM Db2: improper authorizationCVE-2026-16480no fix yetHigh 7.8Aug 12IBM i Access Client Solutions: code executionCVE-2026-16695no fix yet