🔐 CVE Alert

CVE-2026-96012

CRITICAL 9.9

IBM Db2 Mirror for i Privilege Escalation

CVSS Score
9.9
EPSS Score
0.0%
EPSS Percentile
0th

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated privileges on the system.

CWE CWE-264
Vendor ibm
Product db2 mirror for i
Published Oct 12, 2026
Stay Ahead of the Next One

Get instant alerts for ibm db2 mirror for i

Be the first to know when new critical vulnerabilities affecting ibm db2 mirror for i are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

IBM / Db2 Mirror for i
7.4 7.5 7.6

References

NVD ↗ CVE.org ↗ EPSS Data ↗
ibm.com: https://www.ibm.com/support/pages/node/7290193