Unrated severityNVD Advisory· Published Jan 30, 2026· Updated Feb 26, 2026
IBM Db2 Privilege Escalation
CVE-2025-36365
Description
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 under specific configuration of cataloged remote storage aliases could allow an authenticated user to execute unauthorized commands due to an authorization bypass vulnerability using a user-controlled key.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: >= 11.5.0 <= 11.5.9, >= 12.1.0 <= 12.1.3
Patches
Vulnerability mechanics
References
1- www.ibm.com/support/pages/node/7257665mitrevendor-advisorypatch
News mentions
0No linked articles in our index yet.