CVE-2025-36184 | IBM DB2/DB2 Connect Server up to 11.5.9 unnecessary privileges

January 31, 2026 Yanac

A vulnerability identified as critical has been detected in IBM DB2 and DB2 Connect Server up to 11.5.9. This affects an unknown function. Performing a manipulation results in execution with unnecessary privileges.

This vulnerability is reported as CVE-2025-36184. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More