CVE-2025-36184CWE-250

IBM Db2 Privilege Escalation

High · published January 30, 2026

CVSS v3.1
7.2
EPSS
1%
Percentile
44.3
In the wild
Unconfirmed
What it is

⚡ A sneaky privilege escalation vulnerability lurks in IBM Db2 versions 11.5.0 to 11.5.9! An instance owner can exploit unnecessary elevated permissions like a magician pulling rabbits out of hats! 🎩 Think of it like having a house key that not only opens your front door, but also grants access to all the top-secret rooms in your mansion. This vulnerability allows someone who should only have limited access to suddenly have the run of the entire place! An attacker could execute malicious code, giving them root-level access and absolute control over the database server. Imagine the chaos of someone running amok, changing configurations, accessing sensitive data, or even shutting down services! This could lead to data breaches or service interruptions that are absolutely devastating.

Put simply

Think of it like having a house key that not only opens your front door, but also grants access to all the top-secret rooms in your mansion. This vulnerability allows someone who should only have limited access to suddenly have the run of the entire place! This vulnerability in IBM Db2 arises from unnecessary privileges that an instance owner can exploit, allowing them to execute code with escalated privileges. Essentially, it’s a flaw in how privileges are assigned, leading to potential misuse.

What to do

An attacker could execute malicious code, giving them root-level access and absolute control over the database server. Imagine the chaos of someone running amok, changing configurations, accessing sensitive data, or even shutting down services! This could lead to data breaches or service interruptions that are absolutely devastating. To protect against this vulnerability, patch your Db2 instance to version 11.5.10 or later. Conduct a thorough audit of your database permissions and ensure that only essential privileges are granted to instance owners. Don't wait—secure your systems now! You’ve got this! Follow these steps, and you’ll be back in the driver's seat in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00535 · 44.3th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2026-01-30T21:28Z
EPSS history
Timeline
  • 30 JAN 21:28Z
    IBM Db2 Privilege Escalation
    cvelistv5