CVE-2026-113698: IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table
Published Nov 8, 2026
·Updated
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2to a version that resolves this vulnerability.Fixed in V12.1.5Patch Security Update #94858
Event History
Nov 8, 2026
CVE Published
via MITRE·04:59 PM
Data Sourced
via MITRE·04:59 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 are affected.
2
What access does an attacker need to trigger the denial of service?
The vulnerability is network-accessible and requires low-level privileges. No user interaction is required.
3
What is the expected impact of successful exploitation?
Successful exploitation can cause a denial of service. The provided severity vector indicates no confidentiality or integrity impact.