IBM Informix oninit Privilege Escalation Vulnerability (CVE-2026-13367) Advisory

Vulnerability Overview Vulnerability Name: IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility (CVE-2026-13367) Vulnerability Description: A local privilege escalation vulnerability exists in the utility of IBM Informix Dynamic Server. Successful exploitation of this vulnerability allows a local authenticated user to gain root privileges. CVSS Score: 7.8 CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products Affected Products: - IBM Informix Dynamic Server 14.10 - IBM Informix Dynamic Server 15.0 Remediation Fixed Versions: IBM Informix 14.10.xC13W13 and 15.0.1.14 Remediation Steps: - Obtain the fix by selecting Fixes > Informix Server on IBM Fix Central. - Upgrade the database server according to the instructions in the Informix Server documentation. Additional Information Workarounds and Mitigations: None References: - Complete CVSS v3 Guide - Online Calculator v3 Related Resources: - IBM Secure Engineering Web Portal - IBM Product Security Incident Response Blog Publication Date: August 7, 2026 Geographic Scope: Global Disclaimer IBM provides the vulnerability information "as is," without any express or implied warranties. Customers are responsible for assessing the impact of the vulnerability on their own environments. Document Information Modification Date: August 11, 2026 Initial Publication Date: August 7, 2026 UID: IBM17282829 Feedback and Support Feedback Link: Submit Feedback Support Phone: 1-800-IBM-7378 (USA) Global Contacts Directory: Link --- Note: Proof of Concept (POC) code or exploit code is not included in this document.

Goal Reached Thanks to every supporter — we hit 100%!

IBM Informix oninit Privilege Escalation Vulnerability (CVE-2026-13367) Advisory

More from this source