---
id: "CVE-2026-110281"
kind: "vulnerability"
aliases: ["CVE-2026-110281"]
title: "IBM Db2 Genius Hub: weak TLS certificate checks allow man-in-the-middle data theft"
severity: "medium"
cvss: 5.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["db2-genius-hub", "ibm", "infrastructure", "self-hosted"]
not_affected_if: ["other-versions"]
published_at: "2026-11-04T21:17:48+00:00"
first_seen_at: "2026-11-04T21:49:18+00:00"
updated_at: "2026-11-04T21:51:20+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110281", "first_seen_at": "2026-11-04T21:49:18+00:00"}]
exploit_sources: []
---

# IBM Db2 Genius Hub: weak TLS certificate checks allow man-in-the-middle data theft

IBM Db2 Genius Hub versions 1.1.2 through 1.1.5 do not properly validate TLS certificates. An attacker positioned between the client and server could intercept traffic and obtain sensitive information.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Db2 Genius Hub version against `1.1.2`, `1.1.3`, `1.1.4`, `1.1.5`

## Timeline

- 2026-11-04T21:49:18+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-110281

## From the sources

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle technique.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_