
IBMがIBM i、Db2 Mirror、Maximo AI Serviceのそれぞれで重大(Critical)な脆弱性を修正。前2者はCVSSスコア9.9で認証後ユーザによる任意コード実行(CVE-2026-96119, CVE-2026-96012)。後者はCVSSスコア9.8の無認証遠隔コード実行(CVE-2026-90920)。 https://securityonline.info/ibm-critical-vulnerabilities-ibm-i-db2-maximo/
Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated privileges on the system.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE

IBMがIBM i、Db2 Mirror、Maximo AI Serviceのそれぞれで重大(Critical)な脆弱性を修正。前2者はCVSSスコア9.9で認証後ユーザによる任意コード実行(CVE-2026-96119, CVE-2026-96012)。後者はCVSSスコア9.8の無認証遠隔コード実行(CVE-2026-90920)。 https://securityonline.info/ibm-critical-vulnerabilities-ibm-i-db2-maximo/

⚠️ There is a new vulnerability with elevated criticality in IBM Db2 Mirror for i (CVE-2026-96012) vuldb.com/vuln/417206 https://t.co/LUaMBlJmZq