Critical · 9.8 CVE-2026-16956 EUVD-2026-57380GHSA-2r7j-rxjx-fcp9

IBM Db2 Mirror for i is vulnerable to OS command injection []

Published Aug 12, 2026 · Updated Aug 12, 2026 · Assigned by ibm

Description

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Affected products

Vendor	Product	Affected	Fixed
IBM	Db2 Mirror for i	7.4, 7.5, 7.6	—

References

https://www.ibm.com/support/pages/node/7283281 vendor-advisory patch