privilege-escalation-methodwidely-deployed-product-advisory

IBM Db2 Privilege Escalation Flaw Allows Unauthorized Access via Crafted Query

Attack Tradecraft · 2 sources · Updated 3mo ago · First seen Aug 12, 2026

IBM disclosed CVE-2026-10543, a high-severity privilege-escalation vulnerability in IBM Db2 that can be triggered with a specially crafted query. The flaw is classified as CWE-285 Improper Authorization and carries a CVSS v3.1 score of 8.2 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N, indicating low-complexity, network-exploitable abuse with no user interaction required and a high integrity impact.

The issue affects IBM Db2 Server versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 on all platforms. IBM said interim security updates are available through Fix Central for supported release levels, while noting that no workarounds or mitigations are available. The company withheld detailed exploitation guidance to reduce attacker enablement and credited Nicolas Verdier of Amazon with reporting the vulnerability.

Who uses this technique?Get the actors, campaigns, and ATT&CK mapping behind it.

Get the tradecraft

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

2 events · Aug 7, 2026 – Aug 12, 2026

Aug 12, 20263mo ago
IBM PSIRT receives CVE-2026-10543 entry
The CVE record states that CVE-2026-10543 was newly received by psirt@us.ibm.com. The entry describes an IBM Db2 privilege-escalation vulnerability associated with CWE-285.
CVE-2026-10543 - IBM® Db2® is vulnerable to privilege escalation with a specially crafted query
Aug 7, 20263mo ago
IBM publishes Db2 bulletin for CVE-2026-10543 and releases interim fixes
IBM disclosed CVE-2026-10543, a privilege-escalation flaw in Db2 triggered by a specially crafted query, affecting Db2 Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 on all platforms. IBM said no workarounds are available and released interim security updates through Fix Central for supported release levels.
Security Bulletin: IBM® Db2® is vulnerable to privilege escalation with a specially crafted query (CVE-2026-10543)

Linked entities

Related entities

Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.

Open in app →

Vulnerabilities

1 linked

Privilege Escalation in IBM Db2 via Crafted Query (CVE-2026-10543)

Affected products

1 linked

Db2

Organizations

1 linked

International Business Machines

Do you run this?Get the adversaries, campaigns, and ATT&CK mapping behind this technique, with detections ready to deploy.

See Who Uses This Technique

Source coverage

Sources

2 references tracked. Mallory keeps watching after this page renders.

Cvefeed High SeverityAdvisories · Aug 12, 2026

CVE-2026-10543 - IBM® Db2® is vulnerable to privilege escalation with a specially crafted queryOpen source ↗

Ibm SupportNews · Aug 7, 2026

Security Bulletin: IBM® Db2® is vulnerable to privilege escalation with a specially crafted query (CVE-2026-10543)Open source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

← Back to News

privilege-escalation-methodwidely-deployed-product-advisory

IBM Db2 Privilege Escalation Flaw Allows Unauthorized Access via Crafted Query

Attack Tradecraft · 2 sources · Updated 3mo ago · First seen Aug 12, 2026

Who uses this technique?Get the actors, campaigns, and ATT&CK mapping behind it.

Get the tradecraft

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

2 events · Aug 7, 2026 – Aug 12, 2026

Aug 12, 20263mo ago
IBM PSIRT receives CVE-2026-10543 entry
The CVE record states that CVE-2026-10543 was newly received by psirt@us.ibm.com. The entry describes an IBM Db2 privilege-escalation vulnerability associated with CWE-285.
CVE-2026-10543 - IBM® Db2® is vulnerable to privilege escalation with a specially crafted query
Aug 7, 20263mo ago
IBM publishes Db2 bulletin for CVE-2026-10543 and releases interim fixes
IBM disclosed CVE-2026-10543, a privilege-escalation flaw in Db2 triggered by a specially crafted query, affecting Db2 Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 on all platforms. IBM said no workarounds are available and released interim security updates through Fix Central for supported release levels.
Security Bulletin: IBM® Db2® is vulnerable to privilege escalation with a specially crafted query (CVE-2026-10543)

Linked entities