Quick answers
- Is CVE-2026-17181 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-17181 being exploited in the wild.
- How severe is CVE-2026-17181?
- Critical severity, with a CVSS score of 9.3, published 14 August 2026.
- Which products and versions are affected?
- IBM Db2 Mirror For I 7.4, 7.5, 7.6.
- Is there a fix for CVE-2026-17181?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-17181 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-17181?
- Check whether you run IBM Db2 Mirror For I at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
CVE-2026-17181 is a path traversal vulnerability (CWE-22) in the IBM Db2 Mirror for i GUI that fails to properly validate and restrict file paths during write operations. The vulnerability is exploitable remotely without authentication (AV:N, PR:N) and requires no user interaction, allowing an attacker to construct malicious path parameters with directory traversal sequences (e.g., "../../../") to write files outside the intended restricted directory. A successful exploit could allow the attacker to overwrite critical files, inject malicious code, or degrade system availability. Patches addressing this vulnerability are available from IBM.
Affected products
- IBM Db2 Mirror for i 7.4, 7.5, 7.6
Timeline
- 2026-08-14: disclosed