VULNERABILITY INTELLIGENCE
CVE-2026-8862
CVSS score7.5 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2026-09-03
Last modified2026-09-10
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code, configuration details, and other sensitive information.
Weakness classification
- psirt@us.ibm.com: CWE-522
Primary references
- psirt@us.ibm.com — Patch, Vendor Advisory