Db2

This hub aggregates every CVE we track for Db2, a product in the databases space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Db2.

• CVE-2026-10535IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell8.4Jul 30, 2026
• CVE-2026-10695IBM® Db2® is vulnerable to a denial of service when running non fenced federated queries6.2Jul 30, 2026
• CVE-2026-7771IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service5.5Jul 17, 2026
• CVE-2026-9762IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control7.8Jul 17, 2026
• CVE-2025-36372IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables5.5Jun 30, 2026
• CVE-2026-10109IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling9.8Jun 30, 2026
• CVE-2026-11906IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user6.5Jun 30, 2026
• CVE-2023-33854Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.5.3Jun 22, 2026
• CVE-2025-2669Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.6.0Jun 22, 2026
• CVE-2024-54178Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.6.5Jun 22, 2026
• CVE-2026-6938IBM® Db2® is vulnerable to authorization bypass when uploading to a remote object storage path with a special query6.5May 27, 2026
• CVE-2026-6053IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables5.5May 27, 2026
• CVE-2026-6052IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables6.5May 27, 2026
• CVE-2026-6051IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heap5.5May 27, 2026
• CVE-2026-1718IBM® Db2® is vulnerable to a denial of service with a specially crafted query when running an AUTONOMOUS procedure7.1May 27, 2026