Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-1352 EUVD-2026-25125GHSA-chwf-7mw9-8249

IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined index

Published Apr 22, 2026 · Updated Apr 23, 2026 · Assigned by ibm

Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic.

Affected products

VendorProductAffectedFixed
IBM Db2 11.5.0 – ≤ 11.5.9, 12.1.0 – ≤ 12.1.4 —

Advisories 1

References