{"id":"CVE-2026-105464","published":"2026-10-12T19:16:37.450","lastModified":"2026-10-13T16:17:14.080","description":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to gain elevated privileges due to improper privilege management.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-269"],"vendors":[],"products":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7291613","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A local privilege escalation vulnerability in IBM Db2 allows attackers with local access to elevate their privileges, potentially leading to full system compromise. This affects multiple versions of Db2 on Linux, UNIX, and Windows platforms.","exploitability":"Exploitation requires local access to the system, making it moderately difficult to achieve from a remote perspective, but once local access is gained, privilege escalation is straightforward.","blast_radius":"If exploited, this vulnerability could allow attackers to gain elevated privileges on Db2 database servers, potentially leading to unauthorized data access, modification, or deletion across the entire database infrastructure.","remediation":"Upgrade to IBM Db2 11.5.10 or 12.1.6 which contain the fix for this privilege management issue.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","database","local-attack"],"model":"garnet-coder","analyzedAt":"2026-10-16T08:57:38.117Z"}}