Dashboard / CVE-2026-13476

CVE-2026-13476

HIGH
MEDIUM Priority: 0.03 BB Relevance: 75/100
Published: 2026-08-12 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: Low
I: Low
A: Low

Description

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
ibm informix_dynamic_server 15.0 – 15.0.1.13
ibm informix_dynamic_server 12.10
ibm informix_dynamic_server 14.10

References & Advisories (1)

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS — Exploitation Probability

0.43%
Raw Score 0.004260
Percentile 36.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00426
2026-10-28
0.00426

Intelligence Sources

nvd ref →

External Links