Privilege Escalation Vulnerability in IBM Db2 by IBM
CVE-2026-105465

8.8HIGH

Key Information:

Vendor

IBM
Status
Db2
Vendor
CVE Published:
12 October 2026

What is CVE-2026-105465?

IBM Db2 versions 11.5.0 to 11.5.9 and 12.1.0 to 12.1.5 are susceptible to a vulnerability when the db2locssh feature is enabled for the db2 instance. This can lead to privilege escalation, allowing unauthorized access and actions within the database system, which could compromise sensitive data and overall system integrity. Users are advised to visit IBM's advisory for detailed patch information and recommended actions.

Affected Version(s)

Db2 11.5.0 <= 11.5.9

Db2 12.1.0 <= 12.1.5

References

https://www.ibm.com/support/pages/node/7291609
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.