Vulnerability in IBM Netezza Software
CVE-2026-8862
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code, configuration details, and other sensitive information.
EPSS: 0.002 (14.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
Weakness classification (CWE)
References
- psirt@us.ibm.com (vendor-advisory, patch)
Frequently asked questions
- What is CVE-2026-8862?
- CVE-2026-8862 is a high-severity vulnerability in IBM Netezza Software, classified under Insufficiently Protected Credentials. CVSS score: 7.5/10. Published 2026-09-03.
- How severe is CVE-2026-8862?
- High severity. CVSS v3 base score is 7.5 out of 10.