IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 27, 2026 · NIST NVD

   Detected

   IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap.

2. Oct 14, 2026 · NIST NVD

   Updated

   IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap.

Affected

• cpe ibm/db2version unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-6051

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-6051

  30-day exploitation probability 0.2%

  first.org
• NIST NVDVulnerability recordCVE-2026-6051

  IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap.

  nvd.nist.gov

References

• Vendor Advisory · ibm.com