← Back to search

CVE-2026-105464

8.8 HIGH

Published 2026-10-12 · Updated 2026-10-13

AI risk analysis

Summary
A local privilege escalation vulnerability in IBM Db2 allows attackers with local access to elevate their privileges, potentially leading to full system compromise. This affects multiple versions of Db2 on Linux, UNIX, and Windows platforms.
Exploitability
Exploitation requires local access to the system, making it moderately difficult to achieve from a remote perspective, but once local access is gained, privilege escalation is straightforward.
Blast radius
If exploited, this vulnerability could allow attackers to gain elevated privileges on Db2 database servers, potentially leading to unauthorized data access, modification, or deletion across the entire database infrastructure.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to IBM Db2 11.5.10 or 12.1.6 which contain the fix for this privilege management issue.
privilege-escalationdatabaselocal-attack

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to gain elevated privileges due to improper privilege management.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-269

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.