Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

IBM Db2 Buffer Overflow Risk in Data Import

CVE-2026-10534 · published 22 days ago
Summary

IBM Db2 versions 11.5 and 12.1 have a security issue that allows an attacker to potentially cause a system crash or execute malicious code when importing data. This is a serious risk because an attacker could exploit it to gain control of your database. IBM recommends updating to a fixed version to prevent this vulnerability.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm db2 <= 11.5.9
>= 11.5, <= 11.5.9
>= 12.1.0, <= 12.1.5
Original advisory text
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.
References
Severity
9.8 Critical
CVSS 3.1: 8.4 (MITRE)
Exploitation
EPSS <1%
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published12 Aug 2026
Updated24 Aug 2026
First seen12 Aug 2026
Sources
CVE-2026-10534 · NVD
CVE-2026-10534 · MITRE
Monitor software like this
Free during beta