Threats affecting pkg:deb/ibm/db2_mirror_for_i

4 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.9	EPSS 0.3%	CVE-2026-96012IBM Db2 Mirror for i · CWE-264 Critical9.9EPSS 0.3%2026-10-12CVE Database V5CVE-2026-96012 IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 contain a critical privilege escalation vulnerability. An authenticated attacker can bypass authorization and input validation checks to execute malicious code and gain elevated privileges on the system. This vulnerability is identified as CWE-264 and has a CVSS 3.1 score of 9.9, indicating a severe impact on confidentiality, integrity, and availability. EPSS 0.3%Vulnerability CWE-264	CVE Database V5	2026-10-12
Low	3.3	EPSS <0.1%	CVE-2026-18104IBM Db2 Mirror for i · Weak Cryptography Low3.3EPSS <0.1%2026-09-24CVE Database V5CVE-2026-18104 IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook (ECB) mode for encryption. EPSS <0.1%Vulnerability CWE-327	CVE Database V5	2026-09-24
High	8.3	EPSS 0.4%	CVE-2026-16708IBM Db2 Mirror for i · External Control of System or Configuration Setting High8.3EPSS 0.4%2026-08-14CVE Database V5CVE-2026-16708 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration. EPSS 0.4%Vulnerability CWE-15 #ghsa-m9v9-6v2x-3cf3	CVE Database V5	2026-08-14
Critical	9.8	EPSS 0.9%	CVE-2026-16956IBM Db2 Mirror for i · OS Command Injection Critical9.8EPSS 0.9%2026-08-12CVE Database V5CVE-2026-16956 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. EPSS 0.9%Vulnerability CWE-78 #ghsa-2r7j-rxjx-fcp9	CVE Database V5	2026-08-12

Page 1 of 1