widely-deployed-product-advisoryinternet-facing-service-vulnerability

IBM Informix SQL Interface RCE Flaw Enables Stack-Based Buffer Overflow

Patch & Detection Intelligence · 2 sources · Updated 3mo ago · First seen Aug 12, 2026

IBM disclosed CVE-2026-13361, a high-severity remote code execution flaw in the SQL Interface Handler of IBM Informix Dynamic Server. The vulnerability stems from an unchecked SQL Interface length field in oninit sq_sgkprepare, allowing an authenticated SQL Interface client to trigger a stack-based buffer overflow with a specially crafted request. IBM rated the issue CVSS 8.8 and said affected releases include Informix Dynamic Server 12.10.x, 14.10, and 15.0.

The weakness aligns with CWE-121, in which data written past a stack buffer can corrupt control-flow data and lead to crashes or arbitrary code execution. IBM said the flaw is fixed in Informix 14.10.xC13W13 and 15.0.1.14, and noted that no workarounds or mitigations are available, making vendor patching the primary remediation path for exposed deployments.

Patch this, or something else?See real exploitation activity before you spend the cycle.

Triage this advisory

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

1 event · Aug 10, 2026

Aug 10, 20263mo ago
IBM publishes bulletin for Informix RCE vulnerability CVE-2026-13361
IBM disclosed CVE-2026-13361, a remote code execution vulnerability in the SQL Interface component of IBM Informix Dynamic Server caused by an unchecked length field leading to a stack-based buffer overflow. IBM said affected versions include 12.10.x, 14.10, and 15.0, and that fixes are available in 14.10.xC13W13 and 15.0.1.14 with no workarounds or mitigations.
Security Bulletin: IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution (CVE-2026-13361)

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

1 linked

RCE in IBM Informix oninit sq_sgkprepare (CVE-2026-13361)

Affected products

1 linked

Informix Dynamic Server

Organizations

1 linked

International Business Machines

Do you run this?See real exploitation activity behind this advisory so you can triage it against everything else in the queue.

Prioritize This Patch

Source coverage

Sources

2 references tracked. Mallory keeps watching after this page renders.

Ibm SupportNews · Aug 10, 2026

Security Bulletin: IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution (CVE-2026-13361)Open source ↗

Cwe MitreNews

CWE - CWE-121: Stack-based Buffer Overflow (4.19.1)Open source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

← Back to News

widely-deployed-product-advisoryinternet-facing-service-vulnerability

IBM Informix SQL Interface RCE Flaw Enables Stack-Based Buffer Overflow

Patch & Detection Intelligence · 2 sources · Updated 3mo ago · First seen Aug 12, 2026

Patch this, or something else?See real exploitation activity before you spend the cycle.

Triage this advisory

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

1 event · Aug 10, 2026

Aug 10, 20263mo ago
IBM publishes bulletin for Informix RCE vulnerability CVE-2026-13361
IBM disclosed CVE-2026-13361, a remote code execution vulnerability in the SQL Interface component of IBM Informix Dynamic Server caused by an unchecked length field leading to a stack-based buffer overflow. IBM said affected versions include 12.10.x, 14.10, and 15.0, and that fixes are available in 14.10.xC13W13 and 15.0.1.14 with no workarounds or mitigations.
Security Bulletin: IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution (CVE-2026-13361)

Linked entities