Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

IBM Db2 Mirror for i: Remote Code Execution via Malicious File

CVE-2026-17184 · published 20 days ago
Summary

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by a vulnerability that could allow an attacker to execute malicious code on your system. This is a serious risk because an attacker could potentially take control of your database. To protect your system, apply the latest updates from IBM.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm db2 mirror for i 7.4
Original advisory text
IBM Db2 Mirror for i is affected by multiple vulnerabilities
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path.
References
Severity
9.8 Critical
CVSS 3.1: 9.8 (MITRE)
Exploitation
EPSS <1%
Type
CWE-73External Control of File Name or Path
Timeline
Published14 Aug 2026
Updated3 Sep 2026
First seen14 Aug 2026
Sources
CVE-2026-17184 · NVD
CVE-2026-17184 · MITRE
Monitor software like this
Free during beta