PT-2026-5450

CVE-2025-36184

·

Published

2026-01-30

·

Updated

2026-10-09

Description by

CVSS 3.1
7.2
High
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) versions 11.5.0 through 11.5.9
Description The software may allow an instance owner to execute malicious code, potentially escalating their privileges to root due to the execution of operations with higher-than-minimum required privileges.
Recommendations Update to a newer version that addresses this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-250: Execution with Unnecessary Privileges
Related identifiers
CVE-2025-36184
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com