SB2026091017 - Multiple vulnerabilities in IBM Informix Dynamic Server
Published: September 10, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 3 vulnerabilities.
1) Inefficient Algorithmic Complexity (CVE-ID: CVE-2026-71848)
CWE-ID: CWE-407 - Inefficient Algorithmic Complexity
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to cause a denial of service.
The vulnerability exists due to algorithmic complexity in languageDetector middleware when processing crafted language tags with a large number of hyphen-separated subtags. A remote attacker can send a specially crafted request to cause a denial of service.
Language values may be sourced from a query parameter, cookie, Accept-Language header, or URL path depending on configuration, and the default detector order exposes query-string, cookie, and header-based processing.
2) Information disclosure (CVE-ID: CVE-2026-71849)
CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor
CVSSv4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to disclose sensitive information.
The vulnerability exists due to improper handling of connection-scoped response headers in Proxy Helper (hono/proxy) when forwarding proxied origin responses. A remote attacker can cause an application to proxy a response that names additional headers in the Connection header to disclose sensitive information.
Only applications that proxy responses from origins that list custom header names in the Connection response header are affected.
3) Exposure of Data Element to Wrong Session (CVE-ID: CVE-2026-71850)
CWE-ID: CWE-488 - Exposure of Data Element to Wrong Session
CVSSv4: 5.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote user to disclose sensitive information.
The vulnerability exists due to exposure of data element to wrong session in the memo() function in hono/jsx when rendering server-side components that read request-specific ambient context through memoized rendering with comparator-equal props. A remote user can trigger rendering of a specially crafted request sequence to disclose sensitive information.
User interaction is required, and exploitation depends on both requests reaching the same warm instance in an order that populates the retained render output.
Remediation
Install update from vendor's website.