CVE-2026-11906

🗓️ 30 Jun 2026 20:17:28Reported by [email protected]Type

CVE-2026-11906: IBM Db2 may allow authenticated users to cause denial of service via XMLTable queries.

Reporter	Title	Published	Views	Family All 13
IBM Security Bulletins	Security Bulletin: IBM Db2 and IBM Java SDK used by IBM Security Verify Governance contain multiple vulnerabilities	21 Aug 202609:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server	29 Jul 202613:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)	6 Aug 202608:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user (CVE-2026-11906)	23 Jun 202619:56	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	5 Aug 202610:08	–	ibm
ATTACKERKB	CVE-2026-11906	30 Jun 202619:42	–	attackerkb
CVE	CVE-2026-11906	30 Jun 202619:42	–	cve
Cvelist	CVE-2026-11906 IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user	30 Jun 202619:42	–	cvelist
Tenable Nessus	IBM DB2 Multiple Vulnerabilities (7277424, 7277423, 7277417) (Unix)	26 Jun 202600:00	–	nessus
Tenable Nessus	IBM DB2 Multiple Vulnerabilities (7277424, 7277423, 7277417) (Windows)	26 Jun 202600:00	–	nessus