CVE-2026-96012

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated privileges on the system.

Score

CVSS 3.1 9.9 Critical

Status

Awaiting Analysis - psirt@us.ibm.com

Published

2026-10-12

Last modified

2026-10-13

Weaknesses

CWE-264

Affected products

• Db2 Mirror For I (Ibm)

References

• https://www.ibm.com/support/pages/node/7290193