AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-9744

IBM Netezza Software: information disclosure

IBM

CVE-2026-9744 · Published Sep 3, 2026 · updated Sep 10, 2026

Medium5.3
No fix yet
IBM advisory

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.

Affected versions

PackageAffectedFixed in
Netezza Software
Product
>= 11.3.0.3, <= Interim Fix 002No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-297

More IBM advisories

All IBM
High 7.5Sep 3IBM Netezza Software: information disclosureCVE-2026-8862no fix yetMedium 5.9Sep 3IBM Netezza Software: information disclosureCVE-2026-9036no fix yetMedium 5.3Sep 3IBM Netezza Software: unauthorized user could inject data into log messagesCVE-2026-9736no fix yetMedium 6.5Sep 3IBM Netezza Software: remote attacker could exploit misconfigurations or namingCVE-2026-9745no fix yetMedium 6.2Sep 3IBM Qiskit SDK: denial of serviceCVE-2026-19795no fix yetMedium 6.4Sep 2Scoped admin OAuth DCR endpoints ignore token_teams restrictions and expose global registered clientsGHSA-w8vq-gj3v-h664fixed in v1.0.8