CVE Catalog

CVE-2026-10534

HighCVSS 8.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.18%

7th percentile - higher than 7% of all known CVEs

Summary

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 are vulnerable to buffer overflow in the IXF IMPORT parser.

Risk Assessment

Buffer overflow could lead to database crashes or potential code execution, threatening data integrity and availability.

Recommendation

Update IBM Db2 to a patched version and restrict access to IXF import functionality to trusted users only.

Original NVD description (English source)

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS