IBM DB2 vulnerabilities

CVEs per yearBy the year they were published

1. 20192
2. 20241
3. 202517
4. 202635

Newest CVEs

• CVE-2026-104364

  IBM® Db2® Denial of Service

  IBM · Db2

  Low3.3
• CVE-2026-104332

  IBM® Db2® Denial of Service

  IBM · Db2

  Medium5.5
• CVE-2026-18166

  IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER command, allowing a privileged database user to read sensitive files from the host filesystem

  IBM · Db2

  High7.7
• CVE-2026-105464

  IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management

  IBM · Db2

  High8.8
• CVE-2026-105466

  IBM® Db2® is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions

  IBM · Db2

  Medium6.5
• CVE-2026-105465

  IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance

  IBM · Db2

  High8.8
• CVE-2026-78404

  IBM® Db2® is vulnerable to local privilege escalation via the db2pd utility

  IBM · Db2

  Medium6.5
• CVE-2026-15955

  IBM® Data Server driver for JDBC and SQLJ could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths

  IBM · Db2

  High7.5
• CVE-2026-16702

  IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference

  IBM · Db2

  Medium6.5
• CVE-2026-17463

  IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption

  IBM · Db2

  Medium6.5