CVE-2026-16480

IBM Db2 is affected: versions 11.5.0–11.5.9 and 12.1.0–12.1.5 expose an improper authorization vulnerability in a certain command that allows a non-privileged user to bypass authority checks and modify database catalog data. The CVSS base score is 4.3 (Network, Low confidence in exploitation, Pri...

CVE-2026-9762

CVE-2026-9762 affects IBM Db2 Client components: the IBM Data Server Driver for JDBC and SQLJ. A remote code execution (RCE) exists when the JDBC URL is under user control. Affected products/versions: Db2 client 11.5.0–11.5.9 and 12.1.0–12.1.4. Root cause identified as CWE-94 (Improper Code Gener...

PT-2025-45485

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 10.5.0 through 10.5.11 IBM Db2 versions 11.1.0 through 11.1.4.7 IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.3 Description The software contains a flaw that may allow an authenticated user to...