CVE-2026-9036: CWE-295 Improper Certificate Validation in IBM Netezza Software

CVE-2026-9036 describes an improper certificate validation vulnerability (CWE-295) in IBM Netezza Software versions 11.3.0.3 through Interim Fix 002. The software does not correctly validate TLS certificates, which could enable attackers to perform man-in-the-middle attacks and obtain sensitive information. The CVSS 3.1 base score is 5.9, reflecting network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality impact without integrity or availability impact.

Successful exploitation of this vulnerability could allow an attacker to intercept and access sensitive information transmitted over TLS connections by exploiting improper certificate validation. The confidentiality of data is at risk, but integrity and availability are not affected according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, users should consider additional network protections such as using VPNs or other secure channels to mitigate man-in-the-middle risks.