Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.3

IBM Db2 may crash from malformed input

CVE-2026-104364 · published 23 days ago
Summary

IBM Db2 versions 11.5.0-11.5.9 and 12.1.0-12.1.5 can stop working if a nearby user supplies specially crafted data. This could interrupt database services for the affected system. Apply the latest IBM-provided patches or updates to fix the input validation problem.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm db2 <= 11.5.9
Original advisory text
IBM® Db2® Denial of Service
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
3.3 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published12 Oct 2026
Updated14 Oct 2026
First seen12 Oct 2026
Sources
CVE-2026-104364 · NVD
CVE-2026-104364 · MITRE
Track software like this
Free during beta