CVE-2026-16480

MEDIUM

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.

CVSS v3.1 Score

4.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE
Published: 8/12/2026Modified: 8/18/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-16480 — IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an impro...

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.

CVE-2026-16480
NIST NVD

References (1)

https://www.ibm.com/support/pages/node/7282951Vendor Advisory