CVE-2025-36425 | IBM DB2/DB2 Connect Server up to 11.5.9/12.1.3 HADR Configuration credentials storage

February 17, 2026 Yanac

A vulnerability labeled as problematic has been found in IBM DB2 and DB2 Connect Server up to 11.5.9/12.1.3. This issue affects some unknown processing of the component HADR Configuration Handler. Such manipulation leads to unprotected storage of credentials.

This vulnerability is listed as CVE-2025-36425. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More