Vulnerabilities

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation when db2locssh is enabled with the db2 instance.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation when db2locssh is enabled with the db2 instance.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

QRadar / WebSphere / Db2 / AIX / MQ / Maximo

CVSS

8.8

Exposure class

Web platform

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-105465 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 5
   CVE NVD 19d ago

   IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation.

   CVSS 3.3 CVE-2026-104364 IBM
2. 8
   CVE NVD 19d ago

   IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a…

   CVSS 5.5 CVE-2026-104332 IBM
3. 8
   CVE NVD 19d ago

   IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility.

   CVSS 6.5 CVE-2026-78404 IBM
4. 15
   CVE NVD 19d ago

   IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated…

   CVSS 7.7 CVE-2026-18166 Microsoft
5. 8
   CVE NVD 19d ago

   IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under…

   CVSS 6.5 CVE-2026-105466 IBM
6. 15
   CVE NVD 19d ago

   IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to…

   CVSS 8.8 CVE-2026-105464 Microsoft