IBM Db2 Mirror for i is vulnerable to OS command injection []

Description

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Affected Products

Vendor	Product	Versions
IBM	Db2 Mirror for i	7.4, 7.5, 7.6

References

https://www.ibm.com/support/pages/node/7283281(vendor-advisory, patch)

Related News (1 articles)

Tier C

VulDB5h ago

CVE-2026-16956 | IBM Db2 Mirror for i 7.4/7.5/7.6 os command injection

→ No new info (linked only)

CVSS 3.19.8 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

https://www.ibm.com/support/pages/node/7283281

CWECWE-78

PublishedAug 12, 2026

Last enriched5h ago

Trending Score44

Source articles1

Independent1

Info Completeness9/14

Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALCVE-2026-17218

IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon []

Trending: 55

HIGHCVE-2026-16863

IBM i is Affected By Out-of-Bounds Read Vulnerability []

Trending: 38

HIGHCVE-2026-17248

IBM i is Affected By Multiple Vulnerabilities in the Debug Server

Trending: 38

HIGHCVE-2026-16907

IBM i is Affected By Multiple Vulnerabilities in the Debug Server

Trending: 38

HIGHCVE-2026-17271

IBM i is Affected By Multiple Vulnerabilities in the Debug Server

Trending: 38

Pin to Dashboard

Verification

State: verified

Confidence: 0%

Vulnerability Timeline

CVE Published

Aug 12, 2026

Discovered by ZDM

Aug 12, 2026

Patch Available

Aug 12, 2026