CVE-2026-16480
MEDIUM
4,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: none
Availability: none
Description
AI Translation Available
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.
602
Client-Side Enforcement of Server-Side Security
DraftCommon Consequences
Security Scopes Affected:
Access Control
Availability
Potential Impacts:
Bypass Protection Mechanism
Dos: Crash, Exit, Or Restart
Gain Privileges Or Assume Identity
Applicable Platforms
Technologies:
ICS/OT, Mobile
https://www.ibm.com/support/pages/node/7282951