CVE-2026-105464
8.8 HIGHPublished 2026-10-12 · Updated 2026-10-13
AI risk analysis
- Summary
- A local privilege escalation vulnerability in IBM Db2 allows attackers with local access to elevate their privileges, potentially leading to full system compromise. This affects multiple versions of Db2 on Linux, UNIX, and Windows platforms.
- Exploitability
- Exploitation requires local access to the system, making it moderately difficult to achieve from a remote perspective, but once local access is gained, privilege escalation is straightforward.
- Blast radius
- If exploited, this vulnerability could allow attackers to gain elevated privileges on Db2 database servers, potentially leading to unauthorized data access, modification, or deletion across the entire database infrastructure.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to IBM Db2 11.5.10 or 12.1.6 which contain the fix for this privilege management issue.
privilege-escalationdatabaselocal-attack
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to gain elevated privileges due to improper privilege management.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-269
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-105465
- HIGHCVE-2026-28625
- HIGHCVE-2026-76266
- HIGHCVE-2026-82893
- HIGHCVE-2026-84089
- CRITICALCVE-2026-85947
- CRITICALCVE-2026-85948
- CRITICALCVE-2026-85955
Related by shared AI tags and CWE weakness class. Browse the full archive.