CVE-2026-18166

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command...

EUVD-2026-97772

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command...

CVE-2026-18166 IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER command, allowing a privileged database user to read sensitive files from the host filesystem

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command...

CVE-2026-18166 IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER command, allowing a privileged database user to read sensitive files from the host filesystem

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command...

CVE-2026-18166

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 for Linux, UNIX, and Windows (including DB2 Connect Server ) are vulnerable to arbitrary library loading. The root cause is improper authorization when using the CREATE WRAPPER command, which could allow a remote authenticated attac...

CVE-2026-18166: Improper Access Control

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command...

PT-2026-110880

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description Improper authorization when using the CREATE WRAPPER command could allow a remote authenticated attacker to obtain sensitive information. This issue...

Security Bulletin: IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER command, allowing a privileged database user to read sensitive files from the host filesystem (CVE-2026-18166)

Summary IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER command, allowing a privileged database user to read sensitive files from the host filesystem. Vulnerability Details CVEID:CVE-2026-18166 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server...