Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-1577 EUVD-2026-26439GHSA-mcwg-ghgc-h3xj

IBM® Db2® is vulnerable to a denial of service with a specially crafted query involving multiple subqueries

Published Apr 30, 2026 · Updated May 10, 2026 · Assigned by ibm

Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic.

Affected products

VendorProductAffectedFixed
IBM Db2 11.5.0 – ≤ 11.5.9, 12.1.0 – ≤ 12.1.4 —

Advisories 1

References