Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2026-16879: IBM Db2 Mirror for i: Unauthorized Access via User Input
CVE-2026-16879 · published 20 days ago
Summary
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 have a security issue. An attacker with remote access and valid credentials could exploit this to gain unauthorized access to the system. Update to the latest version to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ibm | db2 mirror for i | 7.4 |
Original advisory text
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input.
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input.
References
- https://www.ibm.com/support/pages/node/7283359 vendor-advisory patch
Severity
8.8
High
CVSS 3.1: 8.8 (MITRE)
Exploitation
EPSS <1%
Type
CWE-285Improper Authorization
Timeline
Published14 Aug 2026
Updated29 Aug 2026
First seen14 Aug 2026
Monitor software like this
Free during beta