CVE-2026-96012 CRITICAL

CVE-2026-96012: IBM Db2 Mirror for i Privilege Escalation

Vendor Ibm
Product Db2 Mirror for i
Weakness CWE-264
Published October 12, 2026
Last update October 13, 2026

CVSS base score

9.9/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated privileges on the system.

Key dates

02Disclosure timeline

October 12, 2026 CVE published
October 13, 2026 Record updated

Related vulnerabilities

04Related CVE