Skip to content
OpenAdvisories
High WID-SEC-2026-2057 3 CVEs

IBM DB2: Mehrere Schwachstellen

Published Jun 23, 2026 · Updated Aug 20, 2026 · Revision 3 · de-DE

Vendor: IBM Product: Db2 Product: License Metric Tool Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Informationen offenzulegen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 3

  • Critical 9.8
    CVE-2026-10109

    IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling.

    IBM Db2
  • Medium 6.5
    CVE-2026-11906

    IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query logic of XML…

    IBM Db2
  • Medium 5.5
    CVE-2025-36372

    IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.

    IBM Db2

Revision history

  1. #3

    Neue Updates von IBM aufgenommen

  2. #2

    Referenz(en) aufgenommen: EUVD-2026-40393, EUVD-2026-40406, EUVD-2025-210373

  3. #1

    Initiale Fassung

References