CVE-2026-17177 is a high-severity vulnerability in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 caused by uncontrolled recursion (CWE-674). This flaw allows a remote attacker to trigger a denial of service condition by causing the software to recurse indefinitely or excessively, leading to resource exhaustion and service disruption. The vulnerability has a CVSS 3.1 base score of 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability. No vendor advisory or patch information is currently provided, and no exploits are known to be active in the wild.

The vulnerability can be exploited remotely without authentication or user interaction to cause a denial of service, impacting the availability of IBM Db2 Mirror for i. There is no impact on confidentiality or integrity. This could disrupt database mirroring operations and potentially affect dependent systems or services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting network exposure of affected Db2 Mirror for i instances and monitor for unusual resource consumption indicative of recursion attacks.