PT-2026-72103 · Ibm · Db2 Mirror For I
CVE-2026-17186
·
Published
2026-08-14
·
Updated
2026-08-17
CVSS v3.1
9.9
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
IBM Db2 Mirror for i versions 7.4 through 7.6
Description
Improper neutralization of special elements in a command allows a remote attacker to execute arbitrary CL (Control Language) commands. CL is a command-line interface used to manage system resources and operations on IBM i systems.
Recommendations
Update IBM Db2 Mirror for i versions 7.4 through 7.6 to a version that contains the fix.
Fix
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Db2 Mirror For I