PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-3623 IBM CVE debrief

IBM Netezza Performance Server Replication Services versions 3.0.2.0 through 3.0.5.0 contain a local privilege escalation vulnerability. An attacker with low-privileged access can escalate to root, enabling execution of root-level commands, acquisition of a root shell, and modification of the root password. Successful exploitation permits modification or removal of system-wide files and installation of persistent backdoors, resulting in full system compromise with complete loss of confidentiality, integrity, and availability. The vulnerability is classified as CWE-250 (Execution with Unnecessary Privileges). Published 2026-05-27; currently awaiting analysis in NVD.

Vendor
IBM
Product
Netezza Performance Server Replication Services
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-27
Original CVE updated
2026-05-27
Advisory published
2026-05-27
Advisory updated
2026-05-27

Who should care

Organizations running IBM Netezza Performance Server Replication Services versions 3.0.2.0 through 3.0.5.0, particularly those with multi-user environments where low-privileged access is granted to database administrators, developers, or support personnel. Security teams responsible for data warehouse infrastructure and compliance officers concerned with unauthorized administrative access to critical database systems.

Technical summary

The vulnerability exists in IBM Netezza Performance Server Replication Services versions 3.0.2.0 through 3.0.5.0. A low-privileged attacker can exploit insufficient privilege separation to execute commands with root privileges. The attack requires local access and no user interaction. Successful exploitation grants complete administrative control over the affected system, including ability to modify system files, install persistent malware, and alter authentication credentials. The CVSS v3.1 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, and high impacts across confidentiality, integrity, and availability dimensions.

Defensive priority

critical

Recommended defensive actions

  • Apply security updates from IBM when available per vendor advisory
  • Restrict local access to Netezza Performance Server Replication Services systems to authorized administrators only
  • Monitor for unauthorized privilege escalation attempts via system audit logs
  • Review and validate file integrity of critical system binaries and configuration files
  • Implement principle of least privilege for all service accounts accessing affected systems

Evidence notes

CVSS 3.1 score 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Affected versions explicitly enumerated as 3.0.2.0 through 3.0.5.0. IBM PSIRT reference provided.

Official resources

2026-05-27