CVE-2026-104332: IBM® Db2® Denial of Service
Published Oct 12, 2026
·Updated
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table
Affected Software
1 affected component
IBM DB2>=11.5.0<=11.5.9, >=12.1.0<=12.1.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2 V12.1.5to a version that resolves this vulnerability.Patch Security Update #94858
Event History
Oct 12, 2026
CVE Published
via MITRE·07:18 PM
Data Sourced
via MITRE·07:18 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs local access and low-level privileges on an affected IBM Db2 system. No user interaction is required.
2
What action triggers the denial of service?
The issue is triggered when a specially crafted query is executed with a Materialized Query Table. Successful exploitation affects availability only; no confidentiality or integrity impact is stated.
3
Which Db2 releases are affected?
Affected versions are IBM Db2 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5.