CVE-2026-13476
published 2026-08-12CVE-2026-13476: IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the…
PriorityP350high7.3CVSS 3.1
AVNACLPRNUINSUCLILAL
EPSS
0.43%
35.8th percentile
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | informix_dynamic_server | — | — |
| ibm | informix_dynamic_server | — | — |
| ibm | informix_dynamic_server | — | — |
| ibm | informix_dynamic_server | >= 15.0 < 15.0.1.13 | 15.0.1.13 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Informix Dynamic Server 12.10/14.10/15.0 code injection
vuldb·2026-08-12·CVSS 7.3
CVE-2026-13476 [HIGH] IBM Informix Dynamic Server 12.10/14.10/15.0 code injection
A vulnerability was found in IBM Informix Dynamic Server 12.10/14.10/15.0 and classified as very critical. The affected element is an unknown function. The manipulation results in code injection.
This vulnerability is cataloged as CVE-2026-13476. The attack may be launched remotely. There is no exploit available.
GHSA
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 IBM Informix could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validati
ghsa_unreviewed·2026-08-12
CVE-2026-13476 [HIGH] CWE-78 IBM Informix Dynamic Server 14.10, 15.0, and 12.10 IBM Informix could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validati
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 IBM Informix could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-12
Published