CVE-2026-3623
Vulnerabilities exists in IBM Netezza Performance Server Replication Services
- State
- Published
- Severity
- 7.8 High
- Published
- May 27, 2026
- Updated
- May 28, 2026
- Reserved
- Mar 6, 2026
Description
IBM Netezza Performance Server Replication Services 3.0.2.0 through 3.0.5.0 allows an attacker with low‑privileged access to escalate their privileges to root. By exploiting this flaw, the attacker can execute root‑level commands, obtain a root shell, and change the root user’s password. Successful exploitation also enables modification or removal of system‑wide files and the installation of persistent backdoors. This results in full system compromise with complete loss of confidentiality, integrity, and availability.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | ibm |
Weaknesses
- CWE-250 Execution with Unnecessary Privileges
Affected Products
| Product | Versions |
|---|---|
Netezza Performance Server Replication ServicesIBM |
|
References
- https://www.ibm.com/support/pages/node/7272148vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.