CVE-2026-17079 is a vulnerability in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 where an authenticated remote attacker can bypass security restrictions. This is possible because the attacker can disable server-side input validation via a request parameter, leading to a protection mechanism failure classified under CWE-693. The vulnerability has a CVSS 3.1 base score of 6.3, indicating medium severity, with network attack vector, low attack complexity, and no user interaction required. Confidentiality, integrity, and availability impacts are all low.

An authenticated remote attacker can bypass security restrictions by disabling server-side input validation, potentially leading to unauthorized actions or data manipulation within the affected IBM Db2 Mirror for i instances. The impact on confidentiality, integrity, and availability is rated low but still significant enough to warrant attention due to the bypass of security controls.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Users should monitor IBM's advisories for updates and consider restricting access to the affected versions until a patch is available.