CVE-2026-78404 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd…

Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility.

Affected products and versions

Product	Affected versions	Fixed in
DB2 12.1	12.1.0 → 12.1.5	No fix stated
DB2 11.5	11.5.0 → 11.5.9	No fix stated

Other CVEs of DB2

The 56 CVEs of DB2 →

CVE-2026-104364 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due… 3.3 Low CVE-2026-104332 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially… 5.5 Medium CVE-2026-18166 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could… 7.7 High CVE-2026-105464 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could… 8.8 High