CVE-2026-16956

EUVD-2026-57380
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
ibmCNA
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
ibmdb2_mirror_for_i
7.4
CNA
ibmdb2_mirror_for_i
7.5
CNA
ibmdb2_mirror_for_i
7.6
CNA
Common Weakness Enumeration
References
https://www.ibm.com/support/pages/node/7283281