Threat database

1,838 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.9	EPSS 0.5%	CVE-2026-17186Db2 Mirror for i · OS Command Injection Critical9.9EPSS 0.5%2026-08-14CVE Database V5CVE-2026-17186 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command. EPSS 0.5%Vulnerability IBM #cwe-78	CVE Database V5	2026-08-14
Critical	9.8	EPSS 0.8%	CVE-2026-17184Db2 Mirror for i · External Control of File Name or Path Critical9.8EPSS 0.8%2026-08-14CVE Database V5CVE-2026-17184 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path. EPSS 0.8%Vulnerability IBM #cwe-73	CVE Database V5	2026-08-14
Critical	9.8	EPSS 0.7%	CVE-2026-17182Db2 Mirror for i · Improper Authentication Critical9.8EPSS 0.7%2026-08-14CVE Database V5CVE-2026-17182 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments. EPSS 0.7%Vulnerability IBM #cwe-287	CVE Database V5	2026-08-14
Critical	9.3	EPSS 0.5%	CVE-2026-17181Db2 Mirror for i · Path Traversal Critical9.3EPSS 0.5%2026-08-14CVE Database V5CVE-2026-17181 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to path traversal. EPSS 0.5%Vulnerability IBM #cwe-22	CVE Database V5	2026-08-14
High	8.5	EPSS 3.1%	CVE-2026-17179Db2 Mirror for i · OS Command Injection High8.5EPSS 3.1%2026-08-14CVE Database V5CVE-2026-17179 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to command injection. EPSS 3.1%Vulnerability IBM #cwe-78	CVE Database V5	2026-08-14
High	7.5	EPSS 0.5%	CVE-2026-17177Db2 Mirror for i · Uncontrolled Recursion High7.5EPSS 0.5%2026-08-14CVE Database V5CVE-2026-17177 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion. EPSS 0.5%Vulnerability IBM #cwe-674	CVE Database V5	2026-08-14
High	7.5	EPSS 0.5%	CVE-2026-17175Db2 Mirror for i · Improper Authentication High7.5EPSS 0.5%2026-08-14CVE Database V5CVE-2026-17175 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement. EPSS 0.5%Vulnerability IBM #cwe-287	CVE Database V5	2026-08-14
Medium	6.5	EPSS 0.7%	CVE-2026-17173Db2 Mirror for i · Path Traversal Medium6.5EPSS 0.7%2026-08-14CVE Database V5CVE-2026-17173 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths. EPSS 0.7%Vulnerability IBM #cwe-22 #ghsa-586h-382r-rc23	CVE Database V5	2026-08-14
High	8.2	EPSS 0.5%	CVE-2026-17081Db2 Mirror for i · Path Traversal High8.2EPSS 0.5%2026-08-14CVE Database V5CVE-2026-17081 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory. EPSS 0.5%Vulnerability IBM #cwe-22 #ghsa-8hvx-mqvc-3w73	CVE Database V5	2026-08-14
Medium	6.3	EPSS 0.3%	CVE-2026-17079Db2 Mirror for i · Protection Mechanism Failure Medium6.3EPSS 0.3%2026-08-14CVE Database V5CVE-2026-17079 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter. EPSS 0.3%Vulnerability IBM #cwe-693 #ghsa-rrp2-728p-3hxr	CVE Database V5	2026-08-14
High	7.5	EPSS 0.9%	CVE-2026-16915Db2 Mirror for i · Path Traversal High7.5EPSS 0.9%2026-08-14CVE Database V5CVE-2026-16915 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation. EPSS 0.9%Vulnerability IBM #cwe-22 #ghsa-hv6h-mgvr-7gwq	CVE Database V5	2026-08-14
Medium	5.3	EPSS 0.5%	CVE-2026-16905Db2 Mirror for i · Improper Authentication Medium5.3EPSS 0.5%2026-08-14CVE Database V5CVE-2026-16905 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication. EPSS 0.5%Vulnerability IBM #cwe-287 #ghsa-j7xj-v45c-v97f	CVE Database V5	2026-08-14
High	8.8	EPSS 0.5%	CVE-2026-16879Db2 Mirror for i · Improper Authorization High8.8EPSS 0.5%2026-08-14CVE Database V5CVE-2026-16879 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input. EPSS 0.5%Vulnerability IBM #cwe-285 #ghsa-jvf7-424w-hvr8	CVE Database V5	2026-08-14
High	8.3	EPSS 0.2%	CVE-2026-16708Db2 Mirror for i · External Control of System or Configuration Setting High8.3EPSS 0.2%2026-08-14CVE Database V5CVE-2026-16708 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration. EPSS 0.2%Vulnerability IBM #cwe-15 #ghsa-m9v9-6v2x-3cf3	CVE Database V5	2026-08-14

Showing 821–840 of 1,838 results · 6 duplicate CVE records merged