CVE-2026-17227 describes an SQL Injection vulnerability in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. The flaw arises from improper neutralization of special elements used in SQL commands, which could allow a remote attacker with authentication privileges to bypass security restrictions. The vulnerability has a CVSS 3.1 score of 5.4 (medium severity), with attack vector network, low attack complexity, requiring privileges, no user interaction, and impacts confidentiality and integrity but not availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

A remote authenticated attacker could exploit this vulnerability to bypass security restrictions by injecting specially crafted SQL commands. The impact affects confidentiality and integrity of the database but does not affect availability. The medium CVSS score reflects moderate risk due to the need for authentication and the limited scope of impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to trusted users only and monitor for unusual database activity related to SQL injection attempts. Avoid exposing the affected versions to untrusted networks where possible.