CVE Catalog
CVE-2026-17186
CriticalCVSS 9.9Summary
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command.
Risk Assessment
A remote attacker can execute unauthorized system commands, potentially leading to full system compromise.
Recommendation
Apply the patches provided by IBM for Db2 Mirror for i versions 7.4, 7.5, and 7.6.
Original NVD description (English source)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command.