CVE-2026-86093

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5

Description A stack-based buffer overflow occurs when user-controlled data is improperly copied into a fixed-size stack buffer without bounds checking. This allows an attacker who can control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than it can hold, potentially overwriting adjacent memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.