CVE-2026-8862

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code, configuration details, and other sensitive information.

Score

CVSS 3.1 7.5 High

Status

Analyzed - psirt@us.ibm.com

Published

2026-09-03

Last modified

2026-09-04

Weaknesses

CWE-522

Affected products

• Netezza Performance Server (Ibm)
• Netezza Software (Ibm)

References

• https://www.ibm.com/support/pages/node/7284359