What is the CVSS score of EUVD-2026-57533?

EUVD-2026-57533 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Informix Dynamic Server are affected by EUVD-2026-57533?

IBM Informix Dynamic Server (versions 12.10.x, 14.10, and 15.0) contains a critical remote code execution vulnerability that allows authenticated users with low-privilege SQL credentials to…. A patch is available.

How to fix or mitigate EUVD-2026-57533?

Within 24 hours, inventory all systems running IBM Informix Dynamic Server versions 12.10.x, 14.10, or 15.0 and identify those with exposed SQL network interfaces. Within 7 days, apply the vendor patch from IBM Security Advisory 7283143 to non-production environments first to validate application compatibility, then deploy to production instances during scheduled maintenance windows. Within 30 days, complete patch deployment across all affected Informix systems in your environment and confirm remediation status through vendor-provided validation procedures.

Informix Dynamic Server EUVD-2026-57533

| CVE-2026-13361 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-08-12 ibm

GHSA-vp4r-fvw6-3hxp

Buffer Overflow IBM Stack Overflow Informix Dynamic Server

8.8

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network-accessible SQL listener requires low-privilege credentials; unchecked length field enables stack overflow yielding full RCE with complete CIA impact on the database host.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 12, 2026 - 20:29 vuln.today

CVE Published

Aug 12, 2026 - 19:43 nvd

HIGH 8.8

DescriptionCVE.org

IBM Informix Dynamic Server 14.10, 12.10.x, and 15.0 IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.

AnalysisAI

Remote code execution in IBM Informix Dynamic Server 14.10, 12.10.x, and 15.0 is possible through a stack-based buffer overflow (CWE-121) in the oninit daemon's sq_sgkprepare function, triggered when processing a SQL interface request containing an unchecked length field. An authenticated, network-adjacent attacker with low-privilege SQL credentials can exploit this to achieve full compromise of the database server, resulting in complete confidentiality, integrity, and availability impact. No public exploit has been identified at time of analysis; IBM has released a patch via Security Advisory 7283143.

Technical ContextAI

The vulnerability resides in sq_sgkprepare, a function within IBM Informix's oninit process - the primary daemon responsible for handling SQL connections, session management, and query preparation in IBM Informix Dynamic Server. CWE-121 (Stack-based Buffer Overflow) identifies the root cause: a length field in the SQL interface protocol is not validated before data is copied to a stack buffer, enabling an attacker to overwrite stack control structures such as return addresses, facilitating arbitrary code execution. The affected CPE (cpe:2.3:a:ibm:informix_dynamic_server) spans versions 12.10.x, 14.10, and 15.0 - IBM Informix Dynamic Server is a commercial relational database system designed for high-volume OLTP workloads, commonly deployed in financial, retail, and legacy enterprise environments.

RemediationAI

Apply the vendor-released patch for IBM Informix Dynamic Server as detailed in IBM Security Advisory 7283143 at https://www.ibm.com/support/pages/node/7283143, which covers the 12.10.x, 14.10, and 15.0 release lines. Exact fix versions per release train are not independently confirmed from available input data - consult the advisory to identify the correct fix pack for your installed version. Where immediate patching is not feasible, restrict network access to the Informix SQL listener (typically TCP port 9088 or as configured) using host-based or network firewall rules, limiting connectivity exclusively to known, trusted client hosts; this reduces the pool of potential authenticated attackers but does not eliminate risk for environments with broad SQL access grants. Network segmentation placing Informix instances behind a dedicated database network tier is a secondary compensating control with low operational impact.