← Back

CVE-2026-16480

nvd nist
Published: Aug 12, 2026Modified: Aug 18, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Exploitability: 2.8 / Impact: 4.2
Source: NVD

Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.

Affected (2)

Products: Ibm: Db2
Ibm
1 product
Db2
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Db2
From 11.5 to 11.5.9
Db2
From 12.1.0 to 12.1.5

Related CWEs

CWE-602
Client-Side Enforcement of Server-Side Security
The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.