Paper/Archive/CVE-2026-3856

CVE-2026-3856

IBM Db2 Recovery Expert — IBM Db2 Recovery Expert Missing Integrity Check

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 5.0.050 × 201.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission.

Affected

ProductAffectedFixed inSource

Db2 Recovery Expert5.5 IF 2–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

ibm (CNA)5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

patchibm.com/support/pages/node/7266272