Privilege Escalation Vulnerability in IBM Db2 for Linux, UNIX, and Windows
CVE-2026-105464

8.8HIGH

Key Information:

Vendor

IBM
Status
Db2
Vendor
CVE Published:
12 October 2026

What is CVE-2026-105464?

A vulnerability has been identified in IBM Db2 that could allow a local attacker to gain elevated privileges due to improper privilege management. This issue affects multiple versions of Db2 for Linux, UNIX, and Windows, potentially leading to unauthorized access to sensitive data and system resources. It is essential for organizations using the affected versions to apply the latest patches provided by IBM to mitigate risks associated with this vulnerability.

Affected Version(s)

Db2 11.5.0 <= 11.5.9

Db2 12.1.0 <= 12.1.5

References

https://www.ibm.com/support/pages/node/7291613
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.