by Kastro
Paper/Archive/CVE-2026-16956

CVE-2026-16956

IBM Db2 Mirror for i — IBM Db2 Mirror for i is vulnerable to OS command injection []

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 58.5.585 × 2011.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Affected

ProductAffectedFixed inSource
Db2 Mirror for i7.4–CNA
Db2 Mirror for i7.5–CNA
Db2 Mirror for i7.6–CNA

Scores by source

ibm (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

patchibm.com/support/pages/node/7283281