CVE-2026-3856

EUVD-2026-12657
IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 0.49%
Affected Products (NVD)
VendorProductVersion
ibmdb2_recovery_expert
5.5.0:interim_fix_002
ibmdb2_recovery_expert
5.5.0:interim_fix_002
ibmdb2_recovery_expert
5.5.0:interim_fix_002
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.ibm.com/support/pages/node/7266272