Loading story…
IBM disclosed CVE-2026-10543, a high-severity privilege-escalation vulnerability in IBM Db2 that can be triggered with a specially crafted query. The flaw is classified as CWE-285 Improper Authorization and carries a CVSS v3.1 score of 8.2 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N, indicating low-complexity, network-exploitable abuse with no user interaction required and a high integrity impact.
The issue affects IBM Db2 Server versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 on all platforms. IBM said interim security updates are available through Fix Central for supported release levels, while noting that no workarounds or mitigations are available. The company withheld detailed exploitation guidance to reduce attacker enablement and credited Nicolas Verdier of Amazon with reporting the vulnerability.
Get the actors, campaigns, and ATT&CK mapping behind it.
2 events from the most recent confirmed update back to the earliest known activity.
The CVE record states that CVE-2026-10543 was newly received by psirt@us.ibm.com. The entry describes an IBM Db2 privilege-escalation vulnerability associated with CWE-285.
IBM disclosed CVE-2026-10543, a privilege-escalation flaw in Db2 triggered by a specially crafted query, affecting Db2 Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 on all platforms. IBM said no workarounds are available and released interim security updates through Fix Central for supported release levels.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Get the adversaries, campaigns, and ATT&CK mapping behind this technique, with detections ready to deploy.
2 references tracked. Mallory keeps watching after this page renders.
cvefeed.io
Open sourceibm.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
IBM disclosed **CVE-2026-10109**, a critical remote code execution flaw in **IBM Db2** caused by improper handling of the pre-authentication **DRDA handshake**. The vulnerability is tracked as **CWE-94** and carries a **CVSS 3.1 score of 9.8**, indicating that attackers can exploit it remotely over the network without privileges or user interaction. The issue affects **IBM Db2 Server** versions **11.5.0 through 11.5.9** and **12.1.0 through 12.1.4** across all platforms. IBM said there is **no workaround or mitigation** and directed customers to obtain interim special builds and the latest security fixes through **Fix Central** to remediate exposed systems.
Jun 30, 2026
IBM disclosed **CVE-2026-13361**, a high-severity remote code execution flaw in the SQL Interface Handler of **IBM Informix Dynamic Server**. The vulnerability stems from an unchecked SQL Interface length field in `oninit sq_sgkprepare`, allowing an authenticated SQL Interface client to trigger a **stack-based buffer overflow** with a specially crafted request. IBM rated the issue **CVSS 8.8** and said affected releases include Informix Dynamic Server **12.10.x**, **14.10**, and **15.0**. The weakness aligns with **CWE-121**, in which data written past a stack buffer can corrupt control-flow data and lead to crashes or arbitrary code execution. IBM said the flaw is fixed in **Informix 14.10.xC13W13** and **15.0.1.14**, and noted that **no workarounds or mitigations are available**, making vendor patching the primary remediation path for exposed deployments.
Aug 12, 2026
IBM disclosed two vulnerabilities in traditional **IBM WebSphere Application Server** affecting versions **9.0** and **8.5**, led by **CVE-2026-14512**, a **pre-authentication unsafe deserialization** flaw rated **CVSS 9.8**. The issue could allow a remote attacker to **bypass authentication** or achieve **arbitrary code execution** without user interaction, creating a high-risk path to full compromise of exposed WebSphere environments. IBM also identified **CVE-2026-14528**, a **CVSS 7.4** flaw that could expose sensitive information through insertion into log files. The company directed customers to apply the interim fix for **APAR PH72166** or upgrade to **Fix Pack 9.0.5.29+** for WebSphere 9.0 and **Fix Pack 8.5.5.31+** for WebSphere 8.5, and said **no workarounds or mitigations are available**.
Jul 29, 2026