CVE-2026-3856CWE-353

IBM Db2 Recovery Expert Missing Integrity Check

Medium · published March 17, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
8.0
In the wild
Unconfirmed
What it is

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00188 · 8.0th percentile
Weakness
CWE-353 · Missing Support for Integrity Check
Published
2026-03-17T22:20Z
EPSS history
Timeline
  • 17 MAR 22:20Z
    IBM Db2 Recovery Expert Missing Integrity Check
    cvelistv5