CVE Catalog

CVE-2026-18178

MediumCVSS 5.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.44%

37th percentile - higher than 37% of all known CVEs

Summary

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.

Risk Assessment

An attacker could delete critical system files, potentially causing service disruption or data loss.

Recommendation

It is recommended to apply security patches provided by IBM for Db2 Mirror for i and restrict access to the system.

Original NVD description (English source)

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS