CVE-2026-96012
9.9 CRITICALPublished 2026-10-12 · Updated 2026-10-13
AI risk analysis
- Summary
- IBM Db2 Mirror for i allows authenticated users to escalate privileges by bypassing authorization checks through crafted requests, potentially leading to full system compromise.
- Exploitability
- Exploitation requires an authenticated user account with access to the Db2 Mirror service, which is typically available to internal users or applications, making it moderately difficult to achieve but not highly complex.
- Blast radius
- If exploited, this vulnerability could allow attackers to gain full administrative control over the Db2 Mirror system, potentially affecting database integrity and availability across connected systems.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to IBM Db2 Mirror for i 7.6.1 or later to address this privilege escalation vulnerability.
privilege-escalationauth-bypassdatabase
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated privileges on the system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-264
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100615PoC
- CRITICALCVE-2026-100706PoC
- HIGHCVE-2026-102143PoC
- HIGHCVE-2026-103694
- HIGHCVE-2026-104725PoC
- CRITICALCVE-2026-104748
- CRITICALCVE-2026-105039PoC
- HIGHCVE-2026-105464
Related by shared AI tags and CWE weakness class. Browse the full archive.