{"id":"CVE-2026-116376","kind":"vulnerability","aliases":["CVE-2026-116376"],"related":[],"title":"IBM Db2 Genius Hub: open redirect enables phishing by authenticated users","description":"IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishing attack due to an open redirect vulnerability.","summary":"IBM Db2 Genius Hub versions 1.1.2 through 1.1.5 contain an open redirect flaw that lets a logged-in user be sent to an attacker-chosen site. An attacker can use this to run a phishing attack against users of the product.","severity":"low","cvss":3.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ibm-db2-genius-hub","other"],"not_affected_if":["unknown"],"how_to_check":"- Check the installed Db2 Genius Hub version against the affected range 1.1.2 to 1.1.5 (version command or install metadata: unknown)\n- Confirm whether an account is needed to reach the affected page: unknown","fix":null,"status":"open","published_at":"2026-11-04T21:17:52+00:00","first_seen_at":"2026-11-04T21:49:18+00:00","triaged_at":"2026-11-04T21:52:35+00:00","updated_at":"2026-11-04T21:52:35+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-04T21:52:35Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"IBM Db2 Genius Hub: open redirect enables phishing by authenticated users","impact":"low","summary":"IBM Db2 Genius Hub versions 1.1.2 through 1.1.5 contain an open redirect flaw that lets a logged-in user be sent to an attacker-chosen site. An attacker can use this to run a phishing attack against users of the product.","audience":"businesses","category":"other","nicknames":[],"who_cares":["ibm-db2-genius-hub"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"users are redirected to phishing pages that steal credentials","analyst_note":"Find the vendor advisory for the fixed version and the affected redirect endpoint; the NVD entry alone gives no fix or check.","how_to_check":"- Check the installed Db2 Genius Hub version against the affected range 1.1.2 to 1.1.5 (version command or install metadata: unknown)\n- Confirm whether an account is needed to reach the affected page: unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Teams running IBM Db2 Genius Hub 1.1.2 through 1.1.5 where users log in to the web interface. The sources do not describe the specific redirect parameter or deployment exposure, so unknown whether internet-facing installs are more exposed. Installs on other versions are not listed as affected.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000689,"input_tokens":4127,"output_tokens":552,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-116376':14A,17A '-2026':13A,16A '1.1.2':28B,70C '1.1.3':71C '1.1.4':72C '1.1.5':30B,73C 'allow':75C 'attack':48B,52B,60B,79C,84C 'attacker-chosen':47B 'authent':10A,78C 'chosen':49B 'conduct':81C 'contain':31B 'could':74C 'cve':12A,15A 'db2':2A,20B,24B,67C 'due':85C 'enabl':7A 'flaw':35B 'genius':3A,21B,25B,68C 'hub':4A,22B,26B,69C 'ibm':1A,19B,23B,66C 'ibm-db2-genius-hub':18B 'let':37B 'log':40B 'logged-in':39B 'open':5A,33B,88C 'phish':8A,59B,83C 'product':65B 'redirect':6A,34B,89C 'remot':77C 'run':57B 'sent':44B 'site':50B 'use':54B 'user':11A,42B,62B 'version':27B 'vulner':90C","nicknames":[],"mitigations":[],"who_affected":"Teams running IBM Db2 Genius Hub 1.1.2 through 1.1.5 where users log in to the web interface. The sources do not describe the specific redirect parameter or deployment exposure, so unknown whether internet-facing installs are more exposed. Installs on other versions are not listed as affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["ibmdb2geniushub","low","other"],"campaign_type":null,"first_public_at":"2026-11-04T21:17:52+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116376","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116376","severity":null,"published_at":"2026-11-04T21:17:52+00:00","modified_at":"2026-11-04T21:17:52+00:00","first_seen_at":"2026-11-04T21:49:18+00:00","fetched_at":"2026-11-04T21:49:18+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}