Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

IBM Db2 Mirror for i: Unauthorized Access to Sensitive Data

CVE-2026-17182 · published 20 days ago
Summary

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 have a security weakness that could allow an attacker to access sensitive information without a password. This could happen if an attacker knows the right path to the information. To protect your data, update to a fixed version of IBM Db2 Mirror for i as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm db2 mirror for i 7.4
Original advisory text
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments.
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments.
References
Severity
9.8 Critical
CVSS 3.1: 9.8 (MITRE)
Exploitation
EPSS <1%
Type
CWE-287Improper Authentication
Timeline
Published14 Aug 2026
Updated3 Sep 2026
First seen14 Aug 2026
Sources
CVE-2026-17182 · NVD
CVE-2026-17182 · MITRE
Monitor software like this
Free during beta