CVE-2026-104364: IBM® Db2® Denial of Service
Published Oct 12, 2026
·Updated
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation.
Affected Software
1 affected component
IBM DB2>=11.5.0<=11.5.9, >=12.1.0<=12.1.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch Security Update #94858
Event History
Oct 12, 2026
CVE Published
via MITRE·07:25 PM
Data Sourced
via MITRE·07:25 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs local access to the affected Db2 system and low-level privileges. The vulnerability is not described as remotely exploitable.
2
Which Db2 versions are affected?
Affected versions are Db2 11.5.0 through 11.5.9 and Db2 12.1.0 through 12.1.5.
3
What is the expected impact of successful exploitation?
Successful exploitation can cause a denial of service. The supplied severity vector also indicates a low-integrity impact, with no stated confidentiality impact.