Skip to content
OpenAdvisories
High WID-SEC-2026-2601 2 CVEs

IBM DB2: Mehrere Schwachstellen

Published Jul 30, 2026 · Updated Jul 30, 2026 · de-DE

Vendor: IBM Product: Db2 Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 2

  • High 8.4
    CVE-2026-10535

    IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc.

    IBM Db2
  • Medium 6.2
    CVE-2026-10695

    IBM® Db2® is vulnerable to a denial of service when running non fenced federated queries

    IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non fenced federated queries.

    IBM Db2

Revision history

  1. #1

    Initiale Fassung

References