CVE-2026-17079— IBM Db2 Mirror for i is affected by multiple vulnerabilities
Quick assessment
Affected
IBM Db2 Mirror for i
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
IBM Db2 Mirror for i是美国IBM公司的一款数据库镜像软件。 IBM Db2 Mirror for i 7.4版本、7.5版本和7.6版本存在处理逻辑错误漏洞，该漏洞源于能够通过请求参数禁用服务器端输入验证，可能导致远程认证攻击者绕过安全限制。
Possible ATT&CK Techniques 1 AI
T1136 · Create AccountAffected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Db2 Mirror for i | 7.4 |
affected |
7.5 |
affected | ||
7.6 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-17079
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Db2 Mirror for i is affected by multiple vulnerabilities
Source: CVE Program / CVE List V5
Vulnerability Description
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
保护机制失效
Source: CVE Program / CVE List V5
Vulnerability Title
IBM Db2 Mirror for i 处理逻辑错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Db2 Mirror for i是美国IBM公司的一款数据库镜像软件。 IBM Db2 Mirror for i 7.4版本、7.5版本和7.6版本存在处理逻辑错误漏洞，该漏洞源于能够通过请求参数禁用服务器端输入验证，可能导致远程认证攻击者绕过安全限制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| IBM | Db2 Mirror for i | 7.4 |
cpe:2.3:a:ibm:db2_mirror_for_i:7.4:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-17079
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-17079
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-17079 (1)
Same Patch Batch · IBM · 2026-08-14 · 18 CVEs total
| CVE-2026-17186 | 9.9 CRITICAL | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-17184 | 9.8 CRITICAL | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-17182 | 9.8 CRITICAL | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-17181 | 9.3 CRITICAL | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-16879 | 8.8 HIGH | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-17179 | 8.5 HIGH | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-16708 | 8.3 HIGH | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-17081 | 8.2 HIGH | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-17175 | 7.5 HIGH | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-17177 | 7.5 HIGH | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-16915 | 7.5 HIGH | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-18554 | 7.5 HIGH | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-17173 | 6.5 MEDIUM | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-17209 | 6.3 MEDIUM | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-17227 | 5.4 MEDIUM | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-18178 | 5.4 MEDIUM | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
| CVE-2026-16905 | 5.3 MEDIUM | IBM Db2 Mirror for i is affected by multiple vulnerabilities |
IV. Related Vulnerabilities
Same product: Db2 Mirror for i
-
CVE-2026-18104
IBM Db2 Mirror for i is vulnerable to obtain sensitive infor -
CVE-2026-17047
IBM Db2 Mirror for i is vulnerable to Cross-Site Request For -
CVE-2026-16660
IBM Db2 Mirror for i is affected by multiple vulnerabilities -
CVE-2026-17483
IBM Db2 Mirror for i is affected by multiple vulnerabilities -
CVE-2026-18567
IBM Db2 Mirror for i is affected by multiple vulnerabilities
Same vendor: IBM
-
CVE-2026-84414
IBM i is Affected By An Incorrect Permission Assignment Vuln -
CVE-2026-84421
DataStage on Cloud Pak for Data has several vulnerabilities -
CVE-2026-84422
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-84436
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-84440
IBM Guardium Data Protection is affected by multiple vulnera
Same weakness: CWE-693
-
CVE-2025-71424
Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount -
CVE-2026-100676
stoatchat before 0.15.5 Local Filesystem Read via SVG -
CVE-2026-94251
Apache Sling Security Bundle: ContentDispositionFilter media -
CVE-2026-91796
Foxit PDF Editor/Reader importIcon NTLM Response Information -
CVE-2026-79919
MaxKB function-library sandbox escape: dlopen stack-check by
V. Comments for CVE-2026-17079
No comments yet