CVE-2026-105465CWE-269privilege-escalation

CVE-2026-105465

High · published October 12, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
3.4
In the wild
Unconfirmed
What it is

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation when db2locssh is enabled with the db2 instance.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00144 · 3.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-10-12T23:16Z
References (1)
https://www.ibm.com/support/pages/node/7291609 · [email protected]
EPSS history
Timeline
  • 14 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 12 OCT 18:41Z
    IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance
    cvelistv5
  • 12 OCT 18:41Z
    IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance
    cvelistv5