6.5
Medium
CVE-2026-6938 IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path…
Description
IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DB2 12.1 | 12.1.0 → 12.1.4 | No fix stated |
Other CVEs of DB2
The 56 CVEs of DB2 →
CVE-2026-104364
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due…
3.3
Low
CVE-2026-104332
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially…
5.5
Medium
CVE-2026-18166
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could…
7.7
High
CVE-2026-105464
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could…
8.8
High