CVE Catalog
CVE-2026-17079
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk0.32%
25th percentile - higher than 25% of all known CVEs
Summary
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter.
Risk Assessment
An attacker could disable security mechanisms, potentially enabling further attacks such as SQL injection or unauthorized operations.
Recommendation
It is recommended to update Db2 Mirror for i to a patched version and implement additional security controls at the application level.
Original NVD description (English source)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter.