# CVE-2026-96012: IBM Db2 Mirror for i privilege escalation in GUI

Source: https://junglewise.ai/threats/cve-2026-96012-ibm-db2-mirror-for-i-7-4-7-5-and-7-6-is-vulnerable-to-privilege  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-12. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-96012 · Severity: critical · CVSS 9.9 · Published 2026-10-12

IBM Db2 Mirror for i is a database mirroring solution for enterprise systems. An authenticated attacker can bypass authorization checks in the web GUI to execute arbitrary code and gain system-level privileges, potentially compromising the entire database and underlying system.

Technologies: [IBM Db2 Mirror For I](https://junglewise.ai/threats/technologies/db2-mirror-for-i). Vendors: [IBM](https://junglewise.ai/threats/vendors/ibm).

## Quick answers

**Is CVE-2026-96012 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-96012 being exploited in the wild.

**How severe is CVE-2026-96012?** Critical severity, with a CVSS score of 9.9, published 12 October 2026.

**Which products and versions are affected?** IBM Db2 Mirror For I 7.4, 7.5, 7.6.

**Is there a fix for CVE-2026-96012?** Yes: fixed in Db2 Mirror for i 7.4 PTF SJ11623, 7.5 PTF SJ11624, 7.6 PTF SJ11625. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-96012 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-96012?** Check whether you run IBM Db2 Mirror For I at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Db2 Mirror for i 7.4 PTF SJ11623, 7.5 PTF SJ11624, 7.6 PTF SJ11625

## Technical details

The GUI in Db2 Mirror for i 7.4, 7.5, and 7.6 lacks proper authorization and input validation, allowing authenticated users to craft malicious requests that escalate privileges. The vulnerability has a network attack vector and requires valid credentials but no user interaction. A successful exploit grants the attacker elevated system privileges.

## Affected products

- IBM Db2 Mirror for i 7.4, 7.5, 7.6

## Timeline

- 2026-09-30: disclosed

## References

- [https://www.ibm.com/support/pages/node/7290193](https://www.ibm.com/support/pages/node/7290193)

## Related threats

- [IBM Db2 Mirror for i CSRF in GUI](https://junglewise.ai/threats/cve-2026-17047-ibm-db2-mirror-for-i-csrf-in-gui)
- [IBM Db2 Mirror for i improper authorization in SQL procedure](https://junglewise.ai/threats/cve-2026-17483-ibm-db2-mirror-for-i-improper-authorization-in-sql-procedure)
- [IBM Db2 Mirror for i out-of-bounds read denial of service](https://junglewise.ai/threats/cve-2026-16660-ibm-db2-mirror-for-i-out-of-bounds-read-denial-of-service)
- [IBM Db2 Mirror for i race condition in Unix domain socket path](https://junglewise.ai/threats/cve-2026-18567-ibm-db2-mirror-for-i-race-condition-in-unix-domain-socket-path)
- [IBM Db2 Mirror for i path traversal information disclosure](https://junglewise.ai/threats/cve-2026-18554-ibm-db2-mirror-for-i-path-traversal-information-disclosure)