Skip to content
OpenAdvisories
High WID-SEC-2026-2711 5 CVEs

IBM DB2: Mehrere Schwachstellen

Published Aug 9, 2026 · Updated Aug 20, 2026 · Revision 3 · de-DE

Vendor: IBM Product: Db2 Product: License Metric Tool Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 5

  • High 8.4
    CVE-2026-10534

    IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

    IBM Db2
  • High 8.2
    CVE-2026-10543

    IBM® Db2® is vulnerable to privilege escalation with a specially crafted query

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query.

    IBM Db2
  • Medium 5.5
    CVE-2026-18097

    IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.

    IBM Db2
  • Medium 4.3
    CVE-2026-16480

    IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.

    IBM Db2
  • Low 3.3
    CVE-2026-18096

    IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak

    IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial of service due to a memory leak.

    IBM Db2

Revision history

  1. #3

    Neue Updates von IBM aufgenommen

  2. #2

    Referenz(en) aufgenommen: EUVD-2026-57621, EUVD-2026-57620, EUVD-2026-57619, EUVD-2026-57618, EUVD-2026-57600

  3. #1

    Initiale Fassung

References