CVE Catalog
CVE-2026-16956
CriticalCVSS 9.8Summary
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
Risk Assessment
The risk for the organization is remote command execution, which can lead to full system and data compromise.
Recommendation
It is recommended to apply security patches provided by IBM and restrict network access to Db2 Mirror services.
Original NVD description (English source)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.