Skip to content
OpenAdvisories
Medium WID-SEC-2026-2415 2 CVEs

IBM DB2: Mehrere Schwachstellen

Published Jul 19, 2026 · Updated Aug 20, 2026 · Revision 2 · de-DE

Vendor: IBM Product: Db2 Product: License Metric Tool Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 2

  • High 7.8
    CVE-2026-9762

    IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.

    IBM Db2
  • Medium 5.5
    CVE-2026-7771

    IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service.

    IBM Db2

Revision history

  1. #2

    Neue Updates von IBM aufgenommen

  2. #1

    Initiale Fassung

References