CVE-2026-17182
Received Received - Intake

Authentication Bypass in IBM Db2 Mirror for i

Publication date: 2026-08-14

Last updated on: 2026-08-14

Assigner: IBM Corporation

Description
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-14
Last Modified
2026-08-14
Generated
2026-08-15
AI Q&A
2026-08-14
EPSS Evaluated
N/A
NVD
CVE-2026-17182
EUVD
EUVD-2026-58764

Affected Vendors & Products

Showing 6 associated CPEs
Vendor Product Version / Range
ibm db2_mirror_for_i 7.4
ibm db2_mirror_for_i 7.5
ibm db2_mirror_for_i 7.6
ibm db2_mirror_for_i From 7.4 (inc)
ibm db2_mirror_for_i From 7.5 (inc)
ibm db2_mirror_for_i From 7.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 have an authentication bypass vulnerability. This flaw allows a remote attacker to bypass authentication checks by manipulating request URI path segments. As a result, the attacker can gain unauthorized access to sensitive information or modify data without proper credentials.

Impact Analysis

This vulnerability can lead to unauthorized access to sensitive data stored in IBM Db2 Mirror for i. Attackers could read, alter, or delete critical information without authentication. The high CVSS score (9.8) indicates severe potential impact, including complete system compromise.

Compliance Impact

This vulnerability could violate compliance requirements under GDPR and HIPAA by enabling unauthorized access to personal or protected health information. Organizations using affected Db2 Mirror versions may face legal penalties, data breach notifications, and reputational damage due to non-compliance with security standards.

Mitigation Strategies

Apply the latest IBM Db2 Mirror for i patches or updates to address the improper URI validation issue. Restrict network access to the Db2 Mirror service using firewalls or network segmentation. Monitor logs for suspicious authentication attempts or unauthorized access patterns.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17182. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart