CVE-2026-9736

IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2026-09-03

Last modified

2026-09-05

Weaknesses

CWE-117

Affected products

• Netezza Performance Server (Ibm)
• Netezza Software (Ibm)

References

• https://www.ibm.com/support/pages/node/7284359