CVE Catalog
CVE-2026-17173
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.66%
49th percentile - higher than 49% of all known CVEs
Summary
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths.
Risk Assessment
An attacker could read sensitive files, potentially leading to data leakage or system security compromise.
Recommendation
It is recommended to update Db2 Mirror for i to the latest patched version and restrict file system access.
Original NVD description (English source)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths.