Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

IBM DB2IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.

Risk 48
Severity
7.1
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-16480

IBM DB2IBM® Db2® is vulnerable to privilege escalation with a specially crafted query

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-10543

IBM DB2IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser

Risk 86
Severity
9.8
Buffer Overflow
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Db2 is vulnerable to buffer overflow in the IXF IMPORT parser.

1 / 2
Source: IBM
First published (updated )
CVE-2026-10534

IBM DB2IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control

Risk 51
Severity
7.8
EPSS
0.17%
Code Injection
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

IBM Data Server Driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control.

1 / 2
Source: IBM
First published (updated )
CVE-2026-9762

IBM Db2 12.1.0 through 12.1.4 federated serverIBM® Db2® is vulnerable to a denial of service when running non fenced federated queries

Risk 36
Severity
6.2
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non fenced federated queries.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-10695

IBM DB2IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell

Risk 74
Severity
8.4
Buffer Overflow
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-10535

IBM IBM® Db2®IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service

Risk 31
Severity
5.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-7771

IBM DB2IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling

Risk 86
Severity
9.8
Code Injection
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-10109

IBM DB2IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables

Risk 38
Severity
6.5
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.

1 / 2
Source: MITRE
First published (updated )
CVE-2025-36372

IBM DB2IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user

Risk 38
Severity
6.5
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-11906

IBM DB2IBM® Db2® is vulnerable to a denial of service with a specially crafted query when running an AUTONOMOUS procedure

Risk 43
Severity
7.5
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service with a specially crafted query when autonomous transactions are enabled.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-1718

IBM DB2IBM® Db2® is vulnerable to authorization bypass when uploading to a remote object storage path with a special query

Risk 43
Severity
7.5
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.

First published (updated )
CVE-2026-6938

IBM DB2IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heap

Risk 43
Severity
7.5
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap.

First published (updated )
CVE-2026-6051

IBM DB2IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables

Risk 43
Severity
7.5
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain queries with MDC tables.

First published (updated )
CVE-2026-6052

IBM DB2IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables

Risk 32
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables.

First published (updated )
CVE-2026-6053

IBM Db2 LinuxIBM Db2 denial of service

Risk 32
Severity
5.3
Race Condition
AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1

could allow an authenticated user to cause a denial of service due to concurrent execution of shared resources.

1 / 2
Source: MITRE

Remedy

Customers running any vulnerable fixpack level of an affected Program, V12.1, can download the special build containing the interim fix for this issue from Fix Central. These special builds are available based on the most recent fixpack level for each impacted release: V12.1. They can be applied to any affected fixpack level of the appropriate release to remediate this vulnerability.
First published (updated )
CVE-2025-1493

IBM Db2 LinuxIBM Db2 denial of service

Risk 38
Severity
6.5
AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service when using Q replication due to the improper allocation of CPU resources.

1 / 2
Source: MITRE

Remedy

Customers running any vulnerable affected level of an affected Program, V11.5, and V12.1, can download the special build containing the interim fix for this issue from Fix Central. These special builds are available based on the most recent affected level for each impacted release: V11.5.9, and V12.1.1. They can be applied to any affected mod pack level of the appropriate release to remediate this vulnerability.
First published (updated )
CVE-2025-3050

IBM Db2 LinuxIBM Db2 denial of service

Risk 43
Severity
7.5
AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1

is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

1 / 2
Source: MITRE

Remedy

Customers running any vulnerable affected level of an affected Program, V11.5, and V12.1, can download the special build containing the interim fix for this issue from Fix Central. These special builds are available based on the most recent affected level for each impacted release: V11.5.9, and V12.1.1. They can be applied to any affected mod pack level of the appropriate release to remediate this vulnerability.
First published (updated )
CVE-2025-2518

IBM Db2 LinuxIBM Db2 denial of service

Risk 43
Severity
7.5
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

1 / 2
Source: MITRE

Remedy

Customers running any vulnerable affected level of an affected Program, V11.1, V11.5, and V12.1, can download the special build containing the interim fix for this issue from Fix Central. These special builds are available based on the most recent affected level for each impacted release: V11.1.4 FP7, V11.5.9, and V12.1.1. They can be applied to any affected mod pack level of the appropriate release to remediate this vulnerability.
First published (updated )
CVE-2024-49350

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203