high7.7
CVE-2026-18166
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker …
Impact
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command.
Affected products
| Product | Affected versions |
|---|---|
| IBM Db2 11.5.0 | through 11.5.9 |
| And 12.1.0 | through 12.1.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.