CVE-2026-17181 is a path traversal vulnerability in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. It allows a remote attacker to write files to arbitrary locations on the affected system. The vulnerability does not require privileges or user interaction and has a critical impact on integrity, with limited impact on availability and no confidentiality impact. The vulnerability is classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory). No known exploits in the wild or patch information are currently available.

A remote attacker can write files to arbitrary locations on the system running IBM Db2 Mirror for i 7.4, 7.5, or 7.6. This can lead to unauthorized modification of system or application files, potentially compromising system integrity and stability. The vulnerability does not impact confidentiality but may cause limited availability issues. The critical CVSS score of 9.3 reflects the high risk of exploitation without requiring privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor IBM's security advisories for updates. Consider restricting network access to the affected service to trusted hosts only as a temporary mitigation.