CVE-2026-17182

Analyzed Analyzed - Analysis Complete

Authentication Bypass in IBM Db2 Mirror for i

Publication date: 2026-08-14

Last updated on: 2026-08-20

Assigner: IBM Corporation

Description

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-14

Last Modified

2026-08-20

Generated

2026-09-04

AI Q&A

2026-08-14

EPSS Evaluated

2026-09-02

NVD

CVE-2026-17182

EUVD

EUVD-2026-58764

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	db2_mirror_for_i	From 7.4 (inc) to 7.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 have an authentication bypass vulnerability. This flaw allows a remote attacker to bypass authentication checks by manipulating request URI path segments. As a result, the attacker can gain unauthorized access to sensitive information or modify data without proper credentials.

Detection Guidance

This vulnerability involves improper URI path validation in IBM Db2 Mirror for i. Detection requires checking for unauthorized access attempts or unusual URI patterns in web server or application logs. Monitor for requests with malformed or manipulated path segments targeting Db2 Mirror services. No specific commands are provided in the context.

Impact Analysis

This vulnerability can lead to unauthorized access to sensitive data stored in IBM Db2 Mirror for i. Attackers could read, alter, or delete critical information without authentication. The high CVSS score (9.8) indicates severe potential impact, including complete system compromise.

Compliance Impact

This vulnerability could violate compliance requirements under GDPR and HIPAA by enabling unauthorized access to personal or protected health information. Organizations using affected Db2 Mirror versions may face legal penalties, data breach notifications, and reputational damage due to non-compliance with security standards.

Mitigation Strategies

Apply the latest IBM Db2 Mirror for i patches or updates to address the improper URI validation issue. Restrict network access to the Db2 Mirror service using firewalls or network segmentation. Monitor logs for suspicious authentication attempts or unauthorized access patterns.

Hi! I’m here to help you understand CVE-2026-17182. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70