AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-9736

IBM Netezza Software: unauthorized user could inject data into log messages

IBM

CVE-2026-9736 · Published Sep 3, 2026 · updated Sep 10, 2026

Medium5.3
No fix yet
IBM advisory

IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

Affected versions

PackageAffectedFixed in
Netezza Software
Product
>= 11.3.0.3, <= Interim Fix 002No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-117

More IBM advisories

All IBM
High 7.5Sep 3IBM Netezza Software: information disclosureCVE-2026-8862no fix yetMedium 5.9Sep 3IBM Netezza Software: information disclosureCVE-2026-9036no fix yetMedium 5.3Sep 3IBM Netezza Software: information disclosureCVE-2026-9744no fix yetMedium 6.5Sep 3IBM Netezza Software: remote attacker could exploit misconfigurations or namingCVE-2026-9745no fix yetMedium 6.2Sep 3IBM Qiskit SDK: denial of serviceCVE-2026-19795no fix yetMedium 6.4Sep 2Scoped admin OAuth DCR endpoints ignore token_teams restrictions and expose global registered clientsGHSA-w8vq-gj3v-h664fixed in v1.0.8