CVE-2026-105466: IBM® Db2® is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions.
Other sources
IBM Db2 is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2to a version that resolves this vulnerability.Patch Security Update #94236 - Upgrade
Upgrade
IBM Db2to a version that resolves this vulnerability.Patch Security Update #94722 - Upgrade
Upgrade
IBM Db2to a version that resolves this vulnerability.Patch Security Update #94858
Event History
Frequently Asked Questions
Which Db2 versions are affected?
IBM Db2 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 are affected.
What level of access does an attacker need?
The CVSS vector indicates network-reachable exploitation with low privileges and no user interaction. The specific insertion conditions needed to trigger the issue are not provided.
What is the expected security impact?
The reported impact is denial of service, affecting availability. The CVSS vector indicates no confidentiality or integrity impact.