CVE-2026-96012: IBM Db2 Mirror for i Privilege Escalation

Published Oct 12, 2026

Updated

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated privileges on the system.

Affected Software

1 affected component

IBM Db2 Mirror for i=7.4, =7.5, =7.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Db2 Mirror for i 7.4 to a version that resolves this vulnerability.
Patch SJ11623
Upgrade
Upgrade IBM Db2 Mirror for i 7.5 to a version that resolves this vulnerability.
Patch SJ11624
Upgrade
Upgrade IBM Db2 Mirror for i 7.6 to a version that resolves this vulnerability.
Patch SJ11625

Event History

Oct 12, 2026

CVE Published

via MITRE·07:30 PM

Data Sourced

via MITRE·07:30 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

An attacker must be authenticated to IBM Db2 Mirror for i. The issue affects the 7.4, 7.5, and 7.6 releases identified in the advisory data.

What capabilities could successful exploitation provide?

A successful attacker could bypass additional authorization and input-validation checks, execute malicious code, and obtain elevated privileges on the system.

Does exploitation require user interaction or a complex attack path?

No user interaction is required. The supplied vector indicates network-based exploitation with low attack complexity, but it requires low-level privileges or authenticated access.