High · 7.8 CVE-2026-9762 EUVD-2026-45234GHSA-wg8r-xcfc-f662

IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control

Published Jul 17, 2026 · Updated Jul 18, 2026 · Assigned by ibm

Vendor: IBM Product: Db2

Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.

Affected products

Vendor	Product	Affected	Fixed
IBM	Db2	11.5.0 – ≤ 11.5.9, 12.1.0 – ≤ 12.1.4	—

Advisories 1

WID-SEC-2026-2415 IBM DB2: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 20, 2026

References

https://www.ibm.com/support/pages/node/7279479 vendor-advisory patch