CVE-2026-108767— Multiple vulnerabilities that affects IBM Db2 Genius Hub
Quick assessment
Affected
IBM Db2 Genius Hub
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
IBM Db2 Genius Hub 1.1.2、1.1.3、1.1.4 和 1.1.5 版本可能因未正确中和 HTTP 标头，允许经过身份验证的远程攻击者实施 HTTP 响应分割攻击。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-108767
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Multiple vulnerabilities that affects IBM Db2 Genius Hub
Source: CVE Program / CVE List V5
Vulnerability Description
IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct HTTP response splitting due to improper neutralization of HTTP headers.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
HTTP头部中CRLF序列转义处理不恰当(HTTP响应分割)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| IBM | Db2 Genius Hub | 1.1.2 |
cpe:2.3:a:ibm:db2_genius_hub:1.1.2:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-108767
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-108767
请登录查看更多情报信息。
Other References for CVE-2026-108767 (1)
Same Patch Batch · IBM · 2026-11-04 · 27 CVEs total
| CVE-2026-82418 | 9.8 CRITICAL | IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in crypto |
| CVE-2026-13292 | 8.8 HIGH | IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability |
| CVE-2026-11376 | 8.8 HIGH | IBM MQ is affected by a denial of service vulnerability |
| CVE-2026-11724 | 8.5 HIGH | IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability |
| CVE-2026-13271 | 8.1 HIGH | IBM MQ Managed File Transfer is affected by a denial of service vulnerability |
| CVE-2026-12356 | 7.5 HIGH | IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability |
| CVE-2026-10859 | 7.5 HIGH | IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability |
| CVE-2026-17493 | 7.5 HIGH | IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker. |
| CVE-2026-18142 | 7.1 HIGH | IBM MQ is affected by a denial of service vulnerability |
| CVE-2026-13289 | 7.1 HIGH | IBM MQ Managed File Transfer is vulnerable to XML external entity injection |
| CVE-2026-13284 | 7.1 HIGH | IBM MQ Managed File Transfer is vulnerable to XML external entity injection |
| CVE-2026-16725 | 6.5 MEDIUM | IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith |
| CVE-2026-110282 | 6.5 MEDIUM | Multiple vulnerabilities that affects IBM Db2 Genius Hub |
| CVE-2026-14252 | 6.2 MEDIUM | IBM MQ is affected by a pasword disclosure vulnerability in the runmqccred utility |
| CVE-2026-110281 | 5.9 MEDIUM | Multiple vulnerabilities that affects IBM Db2 Genius Hub |
| CVE-2026-108588 | 5.4 MEDIUM | Multiple vulnerabilities that affects IBM Db2 Genius Hub |
| CVE-2026-12538 | 5.4 MEDIUM | IBM MQ Appliance is affected by an improper validation vulnerability |
| CVE-2026-12550 | 5.4 MEDIUM | IBM MQ is affected by a denial of service vulnerability |
| CVE-2026-19319 | 5.3 MEDIUM | IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in Onnx |
| CVE-2026-108536 | 4.6 MEDIUM | Multiple vulnerabilities that affects IBM Db2 Genius Hub |
Showing top 20 of 27 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Db2 Genius Hub
-
CVE-2026-105702
Multiple vulnerabilities that affects IBM Db2 Genius Hub -
CVE-2026-105991
Multiple vulnerabilities that affects IBM Db2 Genius Hub -
CVE-2026-108536
Multiple vulnerabilities that affects IBM Db2 Genius Hub -
CVE-2026-108588
Multiple vulnerabilities that affects IBM Db2 Genius Hub -
CVE-2026-108838
Multiple vulnerabilities that affects IBM Db2 Genius Hub
Same vendor: IBM
-
CVE-2026-16725
IBM Watson Speech Services Cartridge is vulnerable to a Path -
CVE-2026-19319
IBM Watson Speech Services Cartridge is vulnerable to an Out -
CVE-2026-82418
IBM Watson Speech Services Cartridge is vulnerable to a Use -
CVE-2026-17493
IBM Watson Speech Services Cartridge is vulnerable to a D.O. -
CVE-2026-105702
Multiple vulnerabilities that affects IBM Db2 Genius Hub
Same weakness: CWE-113
-
CVE-2026-120639
CGI versions before 5.00 for Perl allow HTTP header injectio -
CVE-2026-112880
CRLF injection in Proxy-Authorization header built from prox -
CVE-2026-103930
cpp-httplib open_stream serializes CRLF in request target in -
CVE-2026-85976
HTTP response splitting in Progress MarkLogic Server Query C -
CVE-2026-105324
An HTTP header injection vulnerability was found in the ADM