CVE-2025-36186

🗓️ 07 Nov 2025 18:40:32Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 10 Views

CVE-2025-36186 allows local privilege escalation to root on IBM Db2 12.1.0–12.1.3 under certain configurations.

Reporter	Title	Published	Views	Family All 16
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to privilege escalation under specific configurations (CVE-2025-36186)	9 Dec 202519:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 used by IBM Security Verify Governance has multiple vulnerabilities	23 Feb 202612:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL on IBM Cloud Pak for Data	23 Jan 202612:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (December 2025)	16 Dec 202506:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM® Db2® shipped with IBM WebSphere Remote Server	21 Nov 202519:19	–	ibm
Circl	CVE-2025-36186	7 Nov 202521:37	–	circl
CNNVD	IBM Db2 安全漏洞	7 Nov 202500:00	–	cnnvd
Cvelist	CVE-2025-36186 IBM Db2 privilege escalation	7 Nov 202518:40	–	cvelist
Tenable Nessus	IBM DB2 Privilege Escalation (7250486) (Unix)	13 Jan 202600:00	–	nessus
Tenable Nessus	IBM DB2 Privilege Escalation (7250486) (Windows)	13 Jan 202600:00	–	nessus

NVD

Vulners

Node

ibm db2Range12.1.0–12.1.3linux

ibm db2Range12.1.0–12.1.3unix

ibm db2Range12.1.0–12.1.3windows

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:db2:12.1.3:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "Db2",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "12.1.3",
        "status": "affected",
        "version": "12.1.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7250486

18 Nov 2025 19:08Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.4 - 7.8

EPSS0.00009

SSVC

CWE-250