CVE-2026-17175 describes an improper authentication vulnerability in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. This flaw could allow a remote attacker without prior authentication to access sensitive information due to insufficient enforcement of authentication controls. The vulnerability is classified under CWE-287 (Improper Authentication) and has a CVSS 3.1 score of 7.5 with attack vector network, low attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact.

An attacker can remotely exploit this vulnerability without authentication to gain access to sensitive information within the affected IBM Db2 Mirror for i installations. The confidentiality of data is at risk, but integrity and availability are not impacted according to the CVSS vector. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been disclosed by IBM at this time. Users should monitor IBM security advisories for updates and apply patches promptly once available.