CVE-2026-16702
Received Received - Intake

Denial of Service in IBM Db2 due to Null Pointer Dereference

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: IBM Corporation

Description
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-15
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-16702
EUVD
EUVD-2026-77788

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ibm db2 From 11.5.0 (inc) to 11.5.9 (inc)
ibm db2 From 12.1.0 (inc) to 12.1.5 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 for Linux, UNIX, and Windows are vulnerable to a denial of service attack due to a null pointer dereference flaw. A remote authenticated attacker could exploit this to crash the server.

Detection Guidance

Detecting this vulnerability requires checking the installed IBM Db2 version. Run 'db2level' to display the version. Compare the output against versions 11.5.0-11.5.9 or 12.1.0-12.1.5. If affected, apply IBM's security updates.

Impact Analysis

This vulnerability could allow a remote authenticated attacker to cause a denial of service by crashing the IBM Db2 server, disrupting database operations and potentially leading to service unavailability.

Compliance Impact

This vulnerability could lead to a denial of service, potentially disrupting data availability. For GDPR, availability is a key principle, so prolonged outages may raise compliance concerns. HIPAA requires safeguards for data availability, so this flaw could impact compliance if it affects critical systems handling protected health information.

Mitigation Strategies

Apply IBM's security updates for versions 11.5.9, 12.1.4, or 12.1.5. No workarounds are available. Regularly monitor IBM's support page for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16702. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart