IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution

Description

IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.

Affected Products

Vendor	Product	Versions
IBM	Informix Dynamic Server	14.10, 12.10.x, 15.0

References

https://www.ibm.com/support/pages/node/7283143(vendor-advisory, patch)

Related News (1 articles)

Tier C

VulDB2h ago

CVE-2026-13361 | IBM Informix Dynamic Server 12.10.x/14.10/15.0 SQL Interface sq_sgkprepare length input validation

→ No new info (linked only)

CVSS 3.18.8 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

https://www.ibm.com/support/pages/node/7283143

CWECWE-121

PublishedAug 12, 2026

Last enriched1h ago

Trending Score27

Source articles1

Independent1

Info Completeness9/14

Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALCVE-2026-17218

IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon []

Trending: 56

CRITICALCVE-2026-16956

IBM Db2 Mirror for i is vulnerable to OS command injection []

Trending: 45

HIGHCVE-2026-16863

IBM i is Affected By Out-of-Bounds Read Vulnerability []

Trending: 38

HIGHCVE-2026-17248

IBM i is Affected By Multiple Vulnerabilities in the Debug Server

Trending: 38

HIGHCVE-2026-16907

IBM i is Affected By Multiple Vulnerabilities in the Debug Server

Trending: 38

Pin to Dashboard

Verification

State: verified

Confidence: 0%

Vulnerability Timeline

CVE Published

Aug 12, 2026

Discovered by ZDM

Aug 12, 2026

Patch Available

Aug 12, 2026