Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-10109 EUVD-2026-40406GHSA-fq2g-wj3x-6hc2

IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling

Published Jun 30, 2026 · Updated Jul 1, 2026 · Assigned by ibm

Vendor: IBM Product: Db2

Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling.

Affected products

VendorProductAffectedFixed
IBM Db2 11.5.0 – ≤ 11.5.9, 12.1.0 – ≤ 12.1.4 —

Advisories 2

References