CVE-2026-3676
There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.
- State
- Published
- Severity
- 6.5 Medium
- Published
- May 27, 2026
- Updated
- May 27, 2026
- Reserved
- Mar 6, 2026
Description
IBM Cloud APM, Base Private 8.1.4 and IBM Cloud APM, Advanced Private 8.1.4 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query logic of the Fenced environment.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | ibm |
Weaknesses
- CWE-1284 Improper Validation of Specified Quantity in Input
Affected Products
| Product | Versions |
|---|---|
Cloud APM, Base PrivateIBM |
|
Cloud APM, Advanced PrivateIBM |
|
References
- https://www.ibm.com/support/pages/node/7273649vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.