{"id":"CVE-2026-108588","kind":"vulnerability","aliases":["CVE-2026-108588"],"related":[],"title":"IBM Db2 Genius Hub: missing header lets authenticated users bypass security restrictions","description":"IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to a missing X-Content-Type-Options header allowing MIME type sniffing.","summary":"IBM Db2 Genius Hub versions 1.1.2 through 1.1.5 omit the X-Content-Type-Options header, which allows browsers to MIME-sniff responses. A remote attacker with a valid account could use this to bypass security restrictions.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ibm-db2-genius-hub","vendor"],"not_affected_if":["unaffected-version"],"how_to_check":"- Check the installed Db2 Genius Hub version against the affected range 1.1.2 to 1.1.5\n- Inspect HTTP responses from the Genius Hub web interface for an `X-Content-Type-Options` header","fix":null,"status":"open","published_at":"2026-11-04T21:17:46+00:00","first_seen_at":"2026-11-04T21:49:17+00:00","triaged_at":"2026-11-04T21:51:26+00:00","updated_at":"2026-11-04T21:51:26+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-04T21:51:26Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM Db2 Genius Hub: missing header lets authenticated users bypass security restrictions","impact":"low","summary":"IBM Db2 Genius Hub versions 1.1.2 through 1.1.5 omit the X-Content-Type-Options header, which allows browsers to MIME-sniff responses. A remote attacker with a valid account could use this to bypass security restrictions.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["ibm-db2-genius-hub"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"authenticated attacker bypasses some security restrictions via MIME sniffing","analyst_note":"Check the IBM security bulletin for Db2 Genius Hub to confirm the fixed version and what restrictions can be bypassed.","how_to_check":"- Check the installed Db2 Genius Hub version against the affected range 1.1.2 to 1.1.5\n- Inspect HTTP responses from the Genius Hub web interface for an `X-Content-Type-Options` header\n- unknown whether the sources list other checks","plain_action":"","needs_analyst":true,"not_affected_if":["unaffected-version"],"who_is_affected":"Teams running IBM Db2 Genius Hub versions 1.1.2, 1.1.3, 1.1.4 or 1.1.5 with user accounts that can reach the web interface. The sources do not describe the exact exposure beyond the missing header.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000699,"input_tokens":4139,"output_tokens":570,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-108588':15A,18A '-2026':14A,17A '1.1.2':30B,67C '1.1.3':68C '1.1.4':69C '1.1.5':32B,70C 'account':55B 'allow':42B,72C,91C 'attack':51B,76C 'authent':8A,75C 'browser':43B 'bypass':10A,60B,78C 'content':37B,87C 'could':56B,71C 'cve':13A,16A 'db2':2A,21B,26B,64C 'due':81C 'genius':3A,22B,27B,65C 'header':6A,40B,90C 'hub':4A,23B,28B,66C 'ibm':1A,20B,25B,63C 'ibm-db2-genius-hub':19B 'let':7A 'mime':46B,92C 'mime-sniff':45B 'miss':5A,84C 'omit':33B 'option':39B,89C 'remot':50B,74C 'respons':48B 'restrict':12A,62B,80C 'secur':11A,61B,79C 'snif':94C 'sniff':47B 'type':38B,88C,93C 'use':57B 'user':9A 'valid':54B 'vendor':24B 'version':29B 'x':36B,86C 'x-content-type-opt':35B,85C","nicknames":[],"mitigations":[],"who_affected":"Teams running IBM Db2 Genius Hub versions 1.1.2, 1.1.3, 1.1.4 or 1.1.5 with user accounts that can reach the web interface. The sources do not describe the exact exposure beyond the missing header.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["ibmdb2geniushub","medium","vendor"],"campaign_type":null,"first_public_at":"2026-11-04T21:17:46+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-108588","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108588","severity":null,"published_at":"2026-11-04T21:17:46+00:00","modified_at":"2026-11-04T21:17:47+00:00","first_seen_at":"2026-11-04T21:49:17+00:00","fetched_at":"2026-11-04T21:49:17+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}