Medium · 5.3 CVE-2025-27899 EUVD-2025-207711GHSA-wm8j-hgw9-h534

Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows

Published Feb 17, 2026 · Updated Mar 6, 2026 · Assigned by ibm

Vendor: IBM Product: DB2 Recovery Expert for LUW

Description

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 discloses sensitive information in an environment variable that could aid in further attacks against the system.

Affected products

Vendor	Product	Affected	Fixed
IBM	DB2 Recovery Expert for LUW	5.5 Interim Fix 002	—

References

https://www.ibm.com/support/pages/node/7259901 vendor-advisory patch