CVE-2026-17079 describes a vulnerability in IBM Db2 Mirror for i (versions 7.4, 7.5, and 7.6) where an attacker with remote authenticated access can bypass security restrictions. This is possible because the attacker can disable server-side input validation via a crafted request parameter, leading to a protection mechanism failure classified under CWE-693. The vulnerability allows partial compromise of confidentiality, integrity, and availability as indicated by the CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L). No official remediation or patch information is currently provided.

An attacker with authenticated remote access can bypass security controls by disabling server-side input validation, potentially leading to limited confidentiality, integrity, and availability impacts. The medium CVSS score reflects that exploitation requires authentication but can result in meaningful security bypasses.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Organizations should monitor IBM advisories for updates and consider restricting access to affected versions until a patch is available.