What is CVE-2026-13476?

CVE-2026-13476 is a high-severity vulnerability in Ibm Informix Dynamic Server, classified under OS Command Injection. CVSS score: 7.3/10. Published 2026-08-12.

How severe is CVE-2026-13476?

High severity. CVSS v3 base score is 7.3 out of 10.

RCE in Ibm Informix Dynamic Server

CVE-2026-13476

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.

Vulnerability class: Command Injection (OS Command Injection)

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Ibm Informix Dynamic Server — versions 14.10, 15.0, 12.10

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

psirt@us.ibm.com (vendor-advisory, patch)

Frequently asked questions

What is CVE-2026-13476?: CVE-2026-13476 is a high-severity vulnerability in Ibm Informix Dynamic Server, classified under OS Command Injection. CVSS score: 7.3/10. Published 2026-08-12.
How severe is CVE-2026-13476?: High severity. CVSS v3 base score is 7.3 out of 10.