CVE-2026-8862: CWE-522 Insufficiently Protected Credentials in IBM Netezza Software

CVE-2026-8862 describes a vulnerability in IBM Netezza Software 11.3.0.3 through Interim Fix 002 where credentials are hardcoded within the application source code. This flaw allows unauthorized users to access the container registry by using the exposed secret, enabling them to pull private container images. The compromised images may contain proprietary code and sensitive configuration data. The vulnerability is classified under CWE-522, indicating insufficient protection of credentials. No official patch or remediation level has been provided as of the publication date.

The vulnerability allows unauthorized access to the container registry by exploiting hardcoded credentials, potentially exposing proprietary code, configuration details, and other sensitive information contained within private container images. There is no indication of impact on integrity or availability, but confidentiality is highly impacted.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected software and container registries, and monitor for unauthorized access attempts. Avoid deploying affected versions in sensitive environments where exposure of proprietary code would be critical.