CVE-2026-17047
Received Received - Intake

IBM Db2 Mirror for i Information Disclosure Vulnerability

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: IBM Corporation

Description
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-15
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-17047
EUVD
EUVD-2026-77787

Affected Vendors & Products

Showing 6 associated CPEs
Vendor Product Version / Range
ibm db2_mirror_for_i From 7.4 (inc)
ibm db2_mirror_for_i From 7.5 (inc)
ibm db2_mirror_for_i From 7.6 (inc)
ibm db2_mirror_for_i to 7.4 (inc)
ibm db2_mirror_for_i to 7.5 (inc)
ibm db2_mirror_for_i to 7.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to improper request validation in the GUI, allowing remote attackers to obtain sensitive information. This is classified as a Cross-Site Request Forgery (CSRF) vulnerability.

Detection Guidance

Detecting this vulnerability requires checking for IBM Db2 Mirror for i versions 7.4, 7.5, or 7.6 without the latest PTF fixes. Review installed versions and compare them against the patched releases: SJ11335 (7.4), SJ11336 (7.5), and SJ11337 (7.6).

Impact Analysis

A remote attacker could exploit this to gain access to sensitive data through crafted requests. The impact includes potential data breaches or unauthorized information disclosure.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA due to unauthorized data access. Organizations must apply fixes to maintain regulatory compliance and protect sensitive data.

Mitigation Strategies

Apply the provided PTF fixes immediately: SJ11335 for version 7.4, SJ11336 for version 7.5, and SJ11337 for version 7.6. IBM states no workarounds are available, so patching is the only mitigation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17047. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart