CVE-2026-6938
IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.
Published May 27, 2026 · updated Oct 14, 2026 · ibm db2
IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.
Timeline
Detection, updates, and resolution for this record.
May 27, 2026 · NIST NVD
Detected
IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.
Oct 14, 2026 · NIST NVD
Updated
IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.
Affected
- cpe ibm/db2version unspecified
Sources
- CVE.orgCVE-2026-6938
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-6938
30-day exploitation probability 0.3%
first.org - NIST NVDCVE-2026-6938
IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.
nvd.nist.gov