CVE-2026-18567

IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]

Assigner: ibm
Reserved: 01.08.2026 Published: 04.09.2026 Updated: 04.09.2026

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
CVSS Score: 4.4

Attack Vector	Local	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	Low
Privileges Required	Low	Integrity Impact	None
User Interaction	None	Availability Impact	Low

CVSS 3.1

Product Status

Vendor	IBM
Product	Db2 Mirror for i
Versions	Version 7.4 is affected Version 7.5 is affected Version 7.6 is affected

Vendor

IBM

Product

Db2 Mirror for i

Versions

Version 7.4 is affected
Version 7.5 is affected
Version 7.6 is affected

Solutions

IBM strongly recommends addressing the vulnerability now.

IBM i Release

5770-SS1 PTF Numbers

PTF Download Link

7.4

SJ11153

SJ11193

SJ11207

https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11153

https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11193

https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11207

7.5

SJ11152

SJ11194

SJ11206

https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11152

https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11194

https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11206

7.6

SJ11151

SJ11195

SJ11205

https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11151

https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11195

https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11205

https://www.ibm.com/support/fixcentral

References

Problem Types