1. Home
  2. CVE Database
  3. CVE-2026-13476
HIGH · 7.3

CVE-2026-13476

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user su...

Vulnerability Description

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
IbmInformix Dynamic Server>= 15.0, < 15.0.1.13
CanonicalUbuntu Linux-
HpHp-Ux-
IbmAix-
IbmLinux On Ibm Z-
LinuxLinux Kernel-
NovellSuse Linux-
OracleSolaris-
RedhatDesktop-

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2026-13476?

CVE-2026-13476 is a vulnerability with a CVSS score of 7.3 (HIGH). IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user su...

How severe is CVE-2026-13476?

CVE-2026-13476 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-13476?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Informix Dynamic Server, Canonical Ubuntu Linux, Hp Hp-Ux, Ibm Aix, Ibm Linux On Ibm Z.