Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 under specific configuration of cataloged remote storage aliases could allow an authenticated user to execute unauthorized commands due to an authorization bypass vulnerability using a user-controlled key.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-01-30 | 1 | General1 |
| 2026-01-31 | 1 | Disclosure1 |
CVE-2025-36365 IBM Db2 Authorization Bypass Vulnerability Enables Unauthorized Command Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-36365
Post summary
CVE-2025-36365 is an IBM Db2 authorization bypass vulnerability that allows attackers to execute unauthorized commands, as highlighted by the vulnerability listing.
CVE-2025-36365 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) under specific configuration of cataloged remote storage aliases could allow an authenticated user t… https://www.cve.org/CVERecord?id=CVE-2025-36365
Post summary
The post simply references CVE-2025-36365 for IBM Db2 and notes a possible issue with remote storage alias configuration, but provides no exploit, patch, or active exploitation details.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ibm | db2 | - | linux | - |
| App | ibm | db2 | - | unix | - |
| App | ibm | db2 | - | windows | - |