CVE-2026-9744

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.

Score

CVSS 3.1 5.9 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2026-09-03

Last modified

2026-09-04

Weaknesses

CWE-297

Affected products

• Netezza Performance Server (Ibm)
• Netezza Software (Ibm)

References

• https://www.ibm.com/support/pages/node/7284359