CVE Catalog
CVE-2026-17227
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.33%
26th percentile - higher than 26% of all known CVEs
Summary
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command.
Risk Assessment
An attacker could perform unauthorized database operations, potentially compromising data confidentiality and integrity.
Recommendation
It is recommended to update Db2 Mirror for i to the latest patched version and apply the principle of least privilege.
Original NVD description (English source)
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command.