CVE-2026-3623 Vulnerabilities exists in IBM Netezza Performance Server Replication Services
Low-privileged attackers can escalate to root, execute commands, and compromise the system in IBM Netezza Performance Server Replication Services.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-3623?
CVE-2026-3623 is a high-severity vulnerability in IBM Netezza Performance Server Replication Services, published on 27 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
IBM Netezza Performance Server Replication Services 3.0.2.0 through 3.0.5.0 allows an attacker with low‑privileged access to escalate their privileges to root. By exploiting this flaw, the attacker can execute root‑level commands, obtain a root shell, and change the root user’s password. Successful exploitation also enables modification or removal of system‑wide files and the installation of persistent backdoors. This results in full system compromise with complete loss of confidentiality, integrity, and availability.
Weakness: CWE-250
Which versions are affected by CVE-2026-3623?
It affects 1 product.
Products include Ibm Netezza Performance Server Replication Services.
How do I fix CVE-2026-3623?
No fix has been published for CVE-2026-3623 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-3623 being exploited?
There is no known exploitation of CVE-2026-3623 in the wild and no public exploit code.
Sources
Also known as GHSA-wwj4-rjmm-2rvv.