CVE-2026-16956 — IBM Db2 Mirror for i is vulnerable to OS command injection []
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
Published: 2026-08-12 · CVSS: 9.8 · CVSS 3.1
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7