{"id":"CVE-2026-96012","published":"2026-10-12T20:17:10.723","lastModified":"2026-10-13T16:17:14.080","description":"IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated privileges on the system.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-264"],"vendors":[],"products":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7290193","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM Db2 Mirror for i allows authenticated users to escalate privileges by bypassing authorization checks through crafted requests, potentially leading to full system compromise.","exploitability":"Exploitation requires an authenticated user account with access to the Db2 Mirror service, which is typically available to internal users or applications, making it moderately difficult to achieve but not highly complex.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full administrative control over the Db2 Mirror system, potentially affecting database integrity and availability across connected systems.","remediation":"Upgrade to IBM Db2 Mirror for i 7.6.1 or later to address this privilege escalation vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","auth-bypass","database"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:46:35.784Z"}}