What is the CVSS score of EUVD-2026-57627?

EUVD-2026-57627 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.5%.

Which versions of Informix Dynamic Server are affected by EUVD-2026-57627?

IBM Informix Dynamic Server versions 12.10, 14.10, and 15.0 are vulnerable to unauthenticated remote command injection, allowing attackers to execute arbitrary system commands as the database service…. A patch is available.

How to fix or mitigate EUVD-2026-57627?

Within 24 hours: conduct an inventory of all systems running IBM Informix Dynamic Server 12.10, 14.10, or 15.0, and document network accessibility status-restrict remote access where possible as an interim control. Within 7 days: obtain the patched version from IBM's security advisory, test the update in a non-production environment against your database configurations and applications to ensure compatibility before production deployment. Within 30 days: deploy the vendor-released patch to all affected production instances, beginning with internet-exposed or highly networked systems and proceeding systematically through remaining infrastructure.

Informix Dynamic Server EUVD-2026-57627

| CVE-2026-13476 HIGH

OS Command Injection (CWE-78)

2026-08-12 ibm

GHSA-2g57-mxfj-4j65

Command Injection IBM Informix Dynamic Server

7.3

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

7.3 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

vuln.today AI

7.3 HIGH

Network vector with no authentication confirmed by description; Scope:Unchanged and Low CIA reflect service account privilege boundary as the primary blast-radius constraint.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Aug 12, 2026 - 21:39 vuln.today

CVE Published

Aug 12, 2026 - 20:58 nvd

HIGH 7.3

DescriptionCVE.org

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 IBM Informix could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.

AnalysisAI

Remote unauthenticated OS command injection in IBM Informix Dynamic Server 12.10, 14.10, and 15.0 allows network-accessible attackers to execute arbitrary system commands under the Informix service account without any credentials or user interaction. Rooted in CWE-78, the flaw arises from insufficient validation of user-supplied input before it is passed to OS-level execution routines, spanning three major version branches of the product. No CISA KEV listing or public proof-of-concept has been identified at time of analysis; a vendor patch is available via the IBM advisory.

Technical ContextAI

CWE-78 (Improper Neutralization of Special Elements used in an OS Command) describes a class of injection flaws in which attacker-controlled strings containing shell metacharacters reach an OS shell interpreter without adequate sanitization, enabling arbitrary command execution. IBM Informix Dynamic Server is a commercial relational database management system with a long lineage in OLTP and embedded database environments, often deployed in finance, logistics, and government sectors. The affected CPE (cpe:2.3:a:ibm:informix_dynamic_server:*:*:*:*:*:*:*:*) spans major release lines 12.10, 14.10, and 15.0, indicating the defect is not a regression isolated to a single version but exists across multiple maintained branches. The network-exposed attack vector (AV:N) implies that a component handling inbound network input - potentially an administration interface, connection broker, or listener routine - fails to sanitize data before constructing or invoking OS-level commands, a pattern characteristic of legacy server software where OS calls are used for system management tasks.

RemediationAI

Apply the vendor-released patch per the IBM security advisory at https://www.ibm.com/support/pages/node/7282827. The precise patched version number is not independently specified in the available data and must be confirmed directly from the advisory for each affected release branch (12.10, 14.10, or 15.0). As an interim compensating control prior to patching, restrict network access to all IBM Informix listener ports (default TCP 9088 and any additional configured ports) using host-based or perimeter firewall rules, permitting connections only from trusted application-tier hosts - this directly reduces the exploitable attack surface for this network-vectored flaw, though it does not remediate the underlying vulnerability. Additionally, auditing and hardening the Informix service account to the minimum privileges required for database operation will limit the attacker's post-exploitation reach should a compromise occur before patching is complete.