CVE-2025-13108
Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows
- State
- Published
- Severity
- 5.5 Medium
- Published
- Feb 17, 2026
- Updated
- Feb 26, 2026
- Reserved
- Nov 12, 2025
Description
IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an attacker to access sensitive information in memory due to the buffer not properly clearing resources.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | ibm |
Weaknesses
- CWE-226 Sensitive Information in Resource Not Removed Before Reuse
Affected Products
| Product | Versions |
|---|---|
DB2 Merge Backup for Linux, UNIX and WindowsIBM |
|
References
- https://www.ibm.com/support/pages/node/7260043vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.