CVE-2026-16480: Client-Side Enforcement of Server-Side Security

🗓️ 12 Aug 2026 00:00:00Reported by Rapid7Type

Improper authorization in IBM Db2 11.5.0-9, 12.1.0-5 allows non-privileged users to modify catalog.

Reporter	Title	Published	Views	Family All 14
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub	10 Sep 202610:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data. (CVE-2026-16480)	7 Aug 202620:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 and IBM Java SDK used by IBM Security Verify Governance contain multiple vulnerabilities	21 Aug 202609:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)	8 Sep 202609:47	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities	6 Oct 202615:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 and IBM Db2 federated server shipped with IBM WebSphere Remote Server	18 Aug 202621:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities due to the use of IBM® Db2®	19 Oct 202615:59	–	ibm
attackerkb	CVE-2026-16480	12 Aug 202620:49	–	attackerkb
CVE	CVE-2026-16480	12 Aug 202620:49	–	cve
Cvelist	CVE-2026-16480 IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.	12 Aug 202620:49	–	cvelist