PatchTheCEVinformix dynamic server vulnerabilities and fixes
Recent CVEs affecting informix dynamic server, with upgrade or downgrade steps. 3 tracked.
informix dynamic server has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-08-12. Highest priority: CVE-2026-13361 (score 41/100).
- CVE-2026-13361 HIGH 8.8 UPGRADE IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.
- CVE-2026-13476 HIGH 7.3 UPGRADE IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary co
- CVE-2026-13367 HIGH 7.8 DOWNGRADE IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit s
FAQ
How do I fix informix dynamic server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is informix dynamic server being exploited right now?
None of the tracked informix dynamic server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which informix dynamic server CVE should I patch first?
CVE-2026-13361 currently ranks highest (41/100): IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field..