CVE-2026-17209 is a cross-site scripting vulnerability in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. It allows a remote attacker with valid authentication to execute arbitrary scripts in the context of the affected application. The vulnerability requires user interaction and has a CVSS 3.1 base score of 6.3, with low attack complexity, low privileges required, and user interaction needed. The impact includes limited confidentiality loss and high integrity impact, with no availability impact. No known exploits are reported in the wild, and no patch or vendor advisory details are provided in the input data.

An authenticated remote attacker could exploit this XSS vulnerability to execute arbitrary scripts, potentially leading to unauthorized actions or data manipulation within the application context. The confidentiality impact is limited, but the integrity impact is high, meaning attackers could alter data or application behavior. Availability is not affected. There are no reports of active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit exposure by restricting access to trusted users and monitoring for suspicious activity. Follow any vendor recommendations once published.