CVE-2026-17182 is an improper authentication vulnerability (CWE-287) in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. The issue arises from improper validation of request URI path segments, which could be exploited remotely without authentication to bypass access controls. This allows attackers to obtain or alter sensitive information. The vulnerability is rated critical with a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability allows a remote attacker to bypass authentication mechanisms, leading to unauthorized disclosure and modification of sensitive data, as well as potential disruption of service. The critical CVSS score reflects the high impact on confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected service and monitor for suspicious activity related to URI path manipulation. Follow IBM's security advisories for updates.