# CVE-2026-110283: IBM Db2 Genius Hub denial of service in resource validation

Source: https://junglewise.ai/threats/cve-2026-110283-ibm-db2-genius-hub-1-1-2-1-1-3-1-1-4-1-1-5-could-allow-a-remote  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-04. Updated: 2026-11-04  
License: CC BY 4.0 with a link back

CVE-2026-110283 · Severity: medium · CVSS 4.3 · Published 2026-11-04

IBM Db2 Genius Hub is a data management and analytics platform used by enterprises. A flaw in how the software validates user-supplied resource identifiers allows authenticated attackers to cause the service to crash or become unavailable, disrupting business operations.

Technologies: [IBM Db2 Genius Hub](https://junglewise.ai/threats/technologies/db2-genius-hub). Vendors: [IBM](https://junglewise.ai/threats/vendors/ibm).

## Quick answers

**Is CVE-2026-110283 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-110283 being exploited in the wild.

**How severe is CVE-2026-110283?** Medium severity, with a CVSS score of 4.3, published 4 November 2026.

**Which products and versions are affected?** IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5.

**Is there a fix for CVE-2026-110283?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-110283 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-110283?** Check whether you run IBM Db2 Genius Hub at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an improper validation flaw affecting resource identifiers in Db2 Genius Hub versions 1.1.2–1.1.5. A remote authenticated attacker can supply malformed or specially crafted resource identifiers that bypass validation logic, triggering a denial of service condition. The attack requires authentication but can be executed over the network.

## Affected products

- IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5

## Timeline

- 2026-11-04: disclosed

## References

- [https://www.ibm.com/support/pages/node/7295187](https://www.ibm.com/support/pages/node/7295187)

## Related threats

- [IBM Db2 Genius Hub access control bypass](https://junglewise.ai/threats/cve-2026-110282-ibm-db2-genius-hub-1-1-2-1-1-3-1-1-4-1-1-5-could-allow-a-remote)
- [IBM Db2 Genius Hub TLS certificate validation bypass](https://junglewise.ai/threats/cve-2026-110281-ibm-db2-genius-hub-1-1-2-1-1-3-1-1-4-1-1-5-improperly-validates)
- [IBM Db2 Genius Hub information disclosure due to missing cryptographic step](https://junglewise.ai/threats/cve-2026-108910-ibm-db2-genius-hub-1-1-2-1-1-3-1-1-4-1-1-5-could-allow-a-remote)
- [IBM Db2 Genius Hub HTTP response splitting in header handling](https://junglewise.ai/threats/cve-2026-108767-ibm-db2-genius-hub-1-1-2-1-1-3-1-1-4-1-1-5-could-allow-a-remote)
- [IBM Db2 Genius Hub MIME type sniffing via missing header](https://junglewise.ai/threats/cve-2026-108588-ibm-db2-genius-hub-1-1-2-1-1-3-1-1-4-1-1-5-could-allow-a-remote)