Remote Command Execution Vulnerability in IBM Db2 Mirror for i
CVE-2026-17186

9.9CRITICAL

Key Information:

Vendor

IBM
Status
Db2 Mirror For I
Vendor
CVE Published:
14 August 2026

What is CVE-2026-17186?

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 contain a vulnerability that enables remote attackers to execute arbitrary CL commands. This issue arises from insufficient neutralization of special elements in commands, potentially allowing unauthorized access and control. It is crucial for users of affected versions to apply the necessary patches to mitigate this risk.

Affected Version(s)

Db2 Mirror for i 7.4

Db2 Mirror for i 7.5

Db2 Mirror for i 7.6

References

https://www.ibm.com/support/pages/node/7283359
vendor-advisorypatch

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.