CVE Catalog
CVE-2026-17081
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk0.55%
44th percentile - higher than 44% of all known CVEs
Summary
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory.
Risk Assessment
An attacker could write files to arbitrary locations, potentially leading to system modification or privilege escalation.
Recommendation
Apply patches from IBM for Db2 Mirror for i versions 7.4, 7.5, and 7.6.
Original NVD description (English source)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory.