IBMCVE-2026-18096

IBM Db2: denial of service

CVE-2026-18096 · Published Aug 12, 2026 · updated Aug 17, 2026

Low3.3

No fix yet

IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial of service due to a memory leak.

Affected versions

Package	Affected	Fixed in
Db2 Product	<= 12.1.5	No fix yet

Details and references

CVSS 3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-770

www.cve.org/CVERecord?id=CVE-2026-18096
nvd.nist.gov/vuln/detail/CVE-2026-18096
www.ibm.com/support/pages/node/7282953

More IBM advisories

All IBM

Medium 4.2Aug 12

IBM DataPower Gateway: race conditionCVE-2026-7366no fix yet High 8.4Aug 12

IBM Db2: buffer overflowCVE-2026-10534no fix yet High 8.2Aug 12

IBM i: denial of serviceCVE-2026-17485no fix yet Critical 10.0Aug 12

IBM DOORS Next: improper authenticationCVE-2024-27253no fix yet Medium 4.3Aug 12

IBM Db2: improper authorizationCVE-2026-16480no fix yet High 7.8Aug 12

IBM i Access Client Solutions: code executionCVE-2026-16695no fix yet