Denial of Service Vulnerability in IBM Db2 Products
CVE-2026-6051

5.5MEDIUM

Key Information:

Vendor

IBM
Status
Db2
Vendor
CVE Published:
27 May 2026

What is CVE-2026-6051?

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 are susceptible to a denial of service attack when a specially crafted query is executed. This vulnerability arises from insufficient handling of queries that utilize a small statement heap, which could lead to service interruption. It is vital for users of affected versions to secure their installations against potential exploitation by applying the recommended patches and updates.

Affected Version(s)

Db2 11.5.0 <= 11.5.9

Db2 12.1.0 <= 12.1.4

References

https://www.ibm.com/support/pages/node/7273558
vendor-advisorypatch

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.