CVE-2026-6938

HIGH 7.5CVE-2026-6938 · Published 27/05/2026 · updated 14/10/2026

In short

CVE-2026-6938 is a HIGH (CVSS 7.5) vulnerability affecting db2 (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.18%, higher than 8.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
db2 ibm	`≥ 12.1.0, ≤ 12.1.4`	No fix yet

IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.