Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-36428 EUVD-2025-206566GHSA-68c6-w8q5-f84g

IBM Db2 Denial of Service

Published Jan 30, 2026 · Updated Feb 2, 2026 · Assigned by ibm

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when the RPSCAN feature is enabled.

Affected products

VendorProductAffectedFixed
IBM Db2 for Linux, UNIX and Windows 11.5.0 – ≤ 11.5.9, 12.1.0 – ≤ 12.1.3 —

Advisories 1

References