CVE-2026-9762General(ibm / db2)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch ibm db2 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • db2

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-17); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
db2

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-17: 1Mentions · 2026-08-22: 1Patch / Workaround · 2026-08-22: 1Technical Details · 2026-08-22: 107-1708-22
Signal classification2 categories
General
150.0%
Patch
150.0%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-07-171
General1
2026-08-221
Patch1
Full discourse2 posts
  • 4ra1n@4ra1n_x
    Patch

    我和 @pyn3rd 以及 unam4 在 IBM DB2 JDBC 中发现 RCE 漏洞,在5月发现和报告,近期官方修复和发布 CVE-2026-9762 安全公告 该漏洞不是由 AI 分析发现,而需要非常复杂的协议构造触发反序列化,我们进行了深入的分析后才发现漏洞 Make JDBC Attacks Great Again https://www.ibm.com/support/pages/node/7279479 https://t.co/L0Cd9VkY4N

    Post summary

    Researchers identified an RCE in IBM DB2 JDBC in May; IBM has issued a patch and a security announcement for CVE‑2026‑9762. No proof‑of‑concept, exploit details, or active exploitation are mentioned.

    43096317.8K
    3.3K followersView on X
  • VulDB 🛡@vuldb
    General

    There is a new vulnerability with elevated criticality in IBM Db2 (CVE-2026-9762) https://vuldb.com/vuln/379891

    Post summary

    A new critical vulnerability (CVE-2026-9762) in IBM Db2 has been reported, with a link to a vulnerability database for more information.

    00000139
    2.3K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appibmdb2---

Explore more