{"id":"CVE-2026-110281","kind":"vulnerability","aliases":["CVE-2026-110281"],"related":[],"title":"IBM Db2 Genius Hub: weak TLS certificate checks allow man-in-the-middle data theft","description":"IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle technique.","summary":"IBM Db2 Genius Hub versions 1.1.2 through 1.1.5 do not properly validate TLS certificates. An attacker positioned between the client and server could intercept traffic and obtain sensitive information.","severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["db2-genius-hub","ibm","infrastructure","self-hosted"],"not_affected_if":["other-versions"],"how_to_check":"- Check the installed Db2 Genius Hub version against `1.1.2`, `1.1.3`, `1.1.4`, `1.1.5`","fix":null,"status":"open","published_at":"2026-11-04T21:17:48+00:00","first_seen_at":"2026-11-04T21:49:18+00:00","triaged_at":"2026-11-04T21:51:20+00:00","updated_at":"2026-11-04T21:51:20+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-04T21:51:20Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM Db2 Genius Hub: weak TLS certificate checks allow man-in-the-middle data theft","impact":"medium","summary":"IBM Db2 Genius Hub versions 1.1.2 through 1.1.5 do not properly validate TLS certificates. An attacker positioned between the client and server could intercept traffic and obtain sensitive information.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ibm","db2-genius-hub","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker intercepts TLS traffic and reads sensitive information","analyst_note":"Find the IBM security bulletin for Db2 Genius Hub to confirm the fixed version and which connections are affected (https://nvd.nist.gov/vuln/detail/CVE-2026-110281).","how_to_check":"- Check the installed Db2 Genius Hub version against `1.1.2`, `1.1.3`, `1.1.4`, `1.1.5`\n- unknown for other checks; the sources do not say which configuration paths use TLS","plain_action":"","needs_analyst":true,"not_affected_if":["other-versions"],"who_is_affected":"Teams running IBM Db2 Genius Hub versions 1.1.2 through 1.1.5 where it connects over TLS on a network an attacker could sit on. The sources do not say which connections are affected or which fixed version to use.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000696,"input_tokens":4130,"output_tokens":566,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-110281':19A,22A '-2026':18A,21A '1.1.2':37B,65C '1.1.3':66C '1.1.4':67C '1.1.5':39B,68C 'allow':9A,76C 'attack':47B,78C 'certif':7A,45B,72C 'check':8A 'client':51B 'could':54B,75C 'cve':17A,20A 'data':15A 'db2':2A,24B,33B,62C 'db2-genius-hub':23B 'genius':3A,25B,34B,63C 'host':31B 'hub':4A,26B,35B,64C 'ibm':1A,27B,32B,61C 'improp':69C 'inform':60B,82C 'infrastructur':28B 'intercept':55B 'man':11A,84C 'man-in-the-middl':10A 'middl':14A,87C 'obtain':58B,80C 'posit':48B 'proper':42B 'self':30B 'self-host':29B 'sensit':59B,81C 'server':53B 'techniqu':88C 'theft':16A 'tls':6A,44B,71C 'traffic':56B 'use':83C 'valid':43B,70C,73C 'version':36B 'weak':5A","nicknames":[],"mitigations":[],"who_affected":"Teams running IBM Db2 Genius Hub versions 1.1.2 through 1.1.5 where it connects over TLS on a network an attacker could sit on. The sources do not say which connections are affected or which fixed version to use.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["db2geniushub","ibm","infrastructure","medium","selfhosted"],"campaign_type":null,"first_public_at":"2026-11-04T21:17:48+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-110281","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110281","severity":null,"published_at":"2026-11-04T21:17:48+00:00","modified_at":"2026-11-04T21:17:48+00:00","first_seen_at":"2026-11-04T21:49:18+00:00","fetched_at":"2026-11-04T21:49:18+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}