← CVE Intelligence

CVE-2026-9762

IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control PUBLISHED

Description (CNA)

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.

Affected (CNA)

Vendor / productVersions
IBM / Db2affected 11.5.0 through 11.5.9; affected 12.1.0 through 12.1.4

CWE

CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.