IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 for Linux, UNIX, and Windows contain a vulnerability identified as CVE-2026-1352. This vulnerability arises from improper validation of specified quantity in input, classified under CWE-1284. An authenticated user can exploit this flaw by leveraging improper neutralization of special elements in data query logic, resulting in a denial of service condition. The CVSS v3.1 base score is 6.5, indicating medium severity, with an attack vector of network, low attack complexity, requiring privileges but no user interaction, and impacting availability only. No official remediation or patch is currently documented, and no known exploits have been observed in the wild.

The vulnerability allows an authenticated user to cause a denial of service in affected IBM Db2 versions by exploiting improper input validation in query logic. This impacts the availability of the database service but does not affect confidentiality or integrity. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should limit authenticated user privileges to reduce the risk of exploitation. Monitor IBM security advisories for updates regarding patches or mitigation instructions.