Skip to content
Threat Feed
Subscribe

Tag

Db2

4 briefs RSS
high advisory

IBM Db2 Remote Code Execution via JDBC URL Vulnerability (CVE-2026-9762)

A critical remote code execution vulnerability, identified as CVE-2026-9762, exists in IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4, allowing attackers to execute arbitrary code if a JDBC URL is under user control, categorized as an improper control of code generation.

Db2 +1 vulnerability rce code-injection database
2t 1c
medium advisory

IBM DB2 Multiple Vulnerabilities Leading to Denial of Service

A remote, authenticated attacker can exploit multiple vulnerabilities in IBM DB2 to perform a denial of service attack, potentially disrupting database services.

DB2 denial-of-service
2r 1t
medium advisory

IBM Db2 Vulnerable to Denial-of-Service via Crafted Query (CVE-2026-1718)

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 are vulnerable to a denial-of-service (DoS) attack via a specially crafted query when autonomous transactions are enabled, potentially leading to service disruption.

Db2 +1 dos cve-2026-1718 denial of service
2r 1t 1c
critical advisory

IBM DB2 Big SQL Multiple Vulnerabilities

Multiple vulnerabilities in IBM DB2 Big SQL could allow an attacker to perform a denial of service attack and execute arbitrary code.

DB2 Big SQL db2 bigsql denial-of-service code-execution
2r 2t