Skip to content
OpenAdvisories
Critical VDE-2026-112 1 CVE

METTLER TOLEDO: STARe Software DB2 vulnerable component

Published Oct 20, 2026 · Updated Oct 20, 2026

Vendor: IBM Vendor: METTLER TOLEDO Product: Db2 Product: STARe Software

Summary

A vulnerability identified as CVE-2026-10109 affects the external component IBM Db2 12.1.2 delivered with STARe v20.00. The vulnerability is associated with improper handling of the pre-authentication DRDA handshake in affected IBM Db2 versions

Details

Remediation
Update Db2 component of STARe Software V20.00 to version 12.1.4 Update 87349

Impact
Successful exploitation of CVE-2026-10109 could allow remote code execution on systems using the affected external component IBM DB2 12.1.2.

Vulnerabilities 1

  • Critical 9.8
    CVE-2026-10109

    IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling.

    IBM Db2

Revision history

  1. #1.0.0

    Initial revision

References