CVE-2026-96012

IBM Db2 Mirror for i Privilege Escalation

State
Published
Severity
9.9 Critical
Published
Oct 12, 2026
Updated
Oct 13, 2026
Reserved
Sep 22, 2026

Read the record on cve.org

Description

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated privileges on the system.

Scores

CVSSScoreVectorSource
3.19.9 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hibm

Weaknesses

Affected Products

ProductVersions
Db2 Mirror for iIBM
  • 7.4Affected
  • 7.5Affected
  • 7.6Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.