CVE-2026-1352 IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined index

🗓️ 22 Apr 2026 23:37:35Reported by ibmType

CVE-2026-1352: IBM Db2 may return SQLCODE -901 on crafted indexed queries, causing denial of service.

Reporter	Title	Published	Views	Family All 19
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	21 May 202614:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 and IBM Java SDK used by IBM Security Verify Governance contain multiple vulnerabilities	21 Aug 202609:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)	6 May 202613:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined index (CVE-2026-1352)	18 Jun 202614:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM DB2 shipped with IBM WebSphere Remote Server	5 May 202616:22	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities	21 Oct 202600:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Db2 may affect IBM Storage Protect Server.	31 Jul 202620:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact and IBM Tivoli Business Service Manager is vulnerable to multiple vulnerabilities due to DB2 JDBC Driver	1 Jul 202617:10	–	ibm
attackerkb	CVE-2026-1352	22 Apr 202623:37	–	attackerkb
CNNVD	IBM Db2 security vulnerabilities	23 Apr 202600:00	–	cnnvd

[
  {
    "vendor": "IBM",
    "product": "Db2",
    "versions": [
      {
        "status": "affected",
        "version": "11.5.0",
        "lessThanOrEqual": "11.5.9",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "12.1.0",
        "lessThanOrEqual": "12.1.4",
        "versionType": "semver"
      }
    ],
    "cpes": [
      "cpe:2.3:a:ibm:db2:11.5.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:db2:11.5.9:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:db2:12.1.4:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7269433

22 Apr 2026 23:37Current

CVSS 3.16.5

EPSS0.00328

SSVC

CWE-1284