CVE-2026-17227: Improper Neutralization of Special Elements used in an SQL Command

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command...

CVE-2026-17209: Improper Neutralization of Input During Web Page Generation

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting...

CVE-2026-17186: Improper Neutralization of Special Elements used in an OS Command

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command...

CVE-2026-17184: External Control of File Name or Path

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path...

CVE-2026-17182: Improper Authentication

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments...

CVE-2026-17181: Improper Limitation of a Pathname to a Restricted Directory

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to path traversal...

CVE-2026-17179: Improper Neutralization of Special Elements used in an OS Command

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to command injection...

CVE-2026-17177: Uncontrolled Recursion

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-17175: Improper Authentication

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement...

CVE-2026-17173: Improper Limitation of a Pathname to a Restricted Directory

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths...

CVE-2026-17081: Improper Limitation of a Pathname to a Restricted Directory

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-17079: Protection Mechanism Failure

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter...

CVE-2026-16915: Improper Limitation of a Pathname to a Restricted Directory

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

CVE-2026-16905: Improper Authentication

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...

CVE-2026-16879: Improper Authorization

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input...

CVE-2026-16708: External Control of System or Configuration Setting

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration...

CVE-2026-18554: Improper Limitation of a Pathname to a Restricted Directory

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

PT-2026-72096

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths...

PT-2026-72104

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Remote authenticated attackers can execute arbitrary scripts due to cross-site scripting, a flaw where malicious scripts are injected into trusted websites. Recommendations At the momen...

PT-2026-72093

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Improper input validation may allow a remote authenticated attacker to obtain sensitive information. Recommendations At the moment, there is no information about a newer version that...