CVE-2026-17079

MediumCVSS 6.3

Published: 14/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 15/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

25th percentile - higher than 25% of all known CVEs

Summary

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter.

Risk Assessment

An attacker could disable security mechanisms, potentially enabling further attacks such as SQL injection or unauthorized operations.

Recommendation

It is recommended to update Db2 Mirror for i to a patched version and implement additional security controls at the application level.

Original NVD description (English source)

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter.