# IBM Db2 Mirror For I vulnerabilities Source: https://junglewise.ai/threats/technologies/db2-mirror-for-i Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/db2-mirror-for-i.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 24 vulnerabilities in IBM Db2 Mirror For I: 0 in the last 7 days and 5 in the last 90 days, 6 of them critical and 0 exploited in the wild. The most recent, CVE-2026-96012, was published on 12 October 2026. 1 vulnerability in the last four weeks, level on the four before (1). 1 critical against 0. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 5 - All time: 24 (6 critical, 0 exploited in the wild) ## About IBM Db2 Mirror For I IBM database mirroring solution for i-series systems. ## Latest IBM Db2 Mirror For I vulnerabilities - [CVE-2026-96012: IBM Db2 Mirror for i privilege escalation in GUI](https://junglewise.ai/threats/cve-2026-96012-ibm-db2-mirror-for-i-7-4-7-5-and-7-6-is-vulnerable-to-privilege) (critical, CVSS 9.9, published 12 Oct 2026) - [CVE-2026-17047: IBM Db2 Mirror for i CSRF in GUI](https://junglewise.ai/threats/cve-2026-17047-ibm-db2-mirror-for-i-csrf-in-gui) (medium, CVSS 5.4, published 14 Sep 2026) - [CVE-2026-17483: IBM Db2 Mirror for i improper authorization in SQL procedure](https://junglewise.ai/threats/cve-2026-17483-ibm-db2-mirror-for-i-improper-authorization-in-sql-procedure) (medium, CVSS 4.3, published 4 Sep 2026) - [CVE-2026-16660: IBM Db2 Mirror for i out-of-bounds read denial of service](https://junglewise.ai/threats/cve-2026-16660-ibm-db2-mirror-for-i-out-of-bounds-read-denial-of-service) (medium, CVSS 5.3, published 4 Sep 2026) - [CVE-2026-18567: IBM Db2 Mirror for i race condition in Unix domain socket path](https://junglewise.ai/threats/cve-2026-18567-ibm-db2-mirror-for-i-race-condition-in-unix-domain-socket-path) (medium, CVSS 4.4, published 4 Sep 2026) - [CVE-2026-18554: IBM Db2 Mirror for i path traversal information disclosure](https://junglewise.ai/threats/cve-2026-18554-ibm-db2-mirror-for-i-path-traversal-information-disclosure) (high, CVSS 7.5, published 14 Aug 2026) - [CVE-2026-18178: IBM Db2 Mirror for i path traversal deletion](https://junglewise.ai/threats/cve-2026-18178-ibm-db2-mirror-for-i-path-traversal-deletion) (medium, CVSS 5.4, published 14 Aug 2026) - [CVE-2026-17227: IBM Db2 Mirror for i SQL injection via command parameter](https://junglewise.ai/threats/cve-2026-17227-ibm-db2-mirror-for-i-sql-injection-via-command-parameter) (medium, CVSS 5.4, published 14 Aug 2026) - [CVE-2026-17209: IBM Db2 Mirror for i cross-site scripting](https://junglewise.ai/threats/cve-2026-17209-ibm-db2-mirror-for-i-cross-site-scripting) (medium, CVSS 6.3, published 14 Aug 2026) - [CVE-2026-17186: IBM Db2 Mirror for i OS command injection](https://junglewise.ai/threats/cve-2026-17186-ibm-db2-mirror-for-i-os-command-injection) (critical, CVSS 9.9, published 14 Aug 2026) - [CVE-2026-17184: IBM Db2 Mirror for i external control of file name or path](https://junglewise.ai/threats/cve-2026-17184-ibm-db2-mirror-for-i-external-control-of-file-name-or-path) (critical, CVSS 9.8, published 14 Aug 2026) - [CVE-2026-17182: IBM Db2 Mirror for i authentication bypass in URI path validation](https://junglewise.ai/threats/cve-2026-17182-ibm-db2-mirror-for-i-authentication-bypass-in-uri-path-validation) (critical, CVSS 9.8, published 14 Aug 2026) - [CVE-2026-17181: IBM Db2 Mirror for i path traversal in file write](https://junglewise.ai/threats/cve-2026-17181-ibm-db2-mirror-for-i-path-traversal-in-file-write) (critical, CVSS 9.3, published 14 Aug 2026) - [CVE-2026-17179: IBM Db2 Mirror for i command injection denial of service](https://junglewise.ai/threats/cve-2026-17179-ibm-db2-mirror-for-i-command-injection-denial-of-service) (high, CVSS 8.5, published 14 Aug 2026) - [CVE-2026-17177: IBM Db2 Mirror for i denial of service via uncontrolled recursion](https://junglewise.ai/threats/cve-2026-17177-ibm-db2-mirror-for-i-denial-of-service-via-uncontrolled-recursion) (high, CVSS 7.5, published 14 Aug 2026) - [CVE-2026-17175: IBM Db2 Mirror for i authentication bypass in authentication enforcement](https://junglewise.ai/threats/cve-2026-17175-ibm-db2-mirror-for-i-authentication-bypass-in-authentication) (high, CVSS 7.5, published 14 Aug 2026) - [CVE-2026-17173: IBM Db2 Mirror for i path traversal allowing information disclosure](https://junglewise.ai/threats/cve-2026-17173-ibm-db2-mirror-for-i-path-traversal-allowing-information) (medium, CVSS 6.5, published 14 Aug 2026) - [CVE-2026-17081: IBM Db2 Mirror for i path traversal arbitrary file write](https://junglewise.ai/threats/cve-2026-17081-ibm-db2-mirror-for-i-path-traversal-arbitrary-file-write) (high, CVSS 8.2, published 14 Aug 2026) - [CVE-2026-17079: IBM Db2 Mirror for i input validation bypass](https://junglewise.ai/threats/cve-2026-17079-ibm-db2-mirror-for-i-input-validation-bypass) (medium, CVSS 6.3, published 14 Aug 2026) - [CVE-2026-16915: IBM Db2 Mirror for i path traversal in input validation](https://junglewise.ai/threats/cve-2026-16915-ibm-db2-mirror-for-i-path-traversal-in-input-validation) (high, CVSS 7.5, published 14 Aug 2026) - [CVE-2026-16905: IBM Db2 Mirror for i improper authentication leading to information disclosure](https://junglewise.ai/threats/cve-2026-16905-ibm-db2-mirror-for-i-improper-authentication-leading-to) (medium, CVSS 5.3, published 14 Aug 2026) - [CVE-2026-16879: IBM Db2 Mirror for i authorization bypass](https://junglewise.ai/threats/cve-2026-16879-ibm-db2-mirror-for-i-authorization-bypass) (high, CVSS 8.8, published 14 Aug 2026) - [CVE-2026-16708: IBM Db2 Mirror for i information disclosure via external control of system configuration](https://junglewise.ai/threats/cve-2026-16708-ibm-db2-mirror-for-i-information-disclosure-via-external-control) (high, CVSS 8.3, published 14 Aug 2026) - [CVE-2026-16956: IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper…](https://junglewise.ai/threats/cve-2026-16956-ibm-db2-mirror-for-i-7-4-7-5-and-7-6-could-allow-a-remote) (critical, CVSS 9.8, published 12 Aug 2026) ## Most severe IBM Db2 Mirror For I vulnerabilities - [CVE-2026-96012: IBM Db2 Mirror for i privilege escalation in GUI](https://junglewise.ai/threats/cve-2026-96012-ibm-db2-mirror-for-i-7-4-7-5-and-7-6-is-vulnerable-to-privilege) (critical, CVSS 9.9, published 12 Oct 2026) - [CVE-2026-17186: IBM Db2 Mirror for i OS command injection](https://junglewise.ai/threats/cve-2026-17186-ibm-db2-mirror-for-i-os-command-injection) (critical, CVSS 9.9, published 14 Aug 2026) - [CVE-2026-16956: IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper…](https://junglewise.ai/threats/cve-2026-16956-ibm-db2-mirror-for-i-7-4-7-5-and-7-6-could-allow-a-remote) (critical, CVSS 9.8, published 12 Aug 2026) - [CVE-2026-17184: IBM Db2 Mirror for i external control of file name or path](https://junglewise.ai/threats/cve-2026-17184-ibm-db2-mirror-for-i-external-control-of-file-name-or-path) (critical, CVSS 9.8, published 14 Aug 2026) - [CVE-2026-17182: IBM Db2 Mirror for i authentication bypass in URI path validation](https://junglewise.ai/threats/cve-2026-17182-ibm-db2-mirror-for-i-authentication-bypass-in-uri-path-validation) (critical, CVSS 9.8, published 14 Aug 2026) - [CVE-2026-17181: IBM Db2 Mirror for i path traversal in file write](https://junglewise.ai/threats/cve-2026-17181-ibm-db2-mirror-for-i-path-traversal-in-file-write) (critical, CVSS 9.3, published 14 Aug 2026) - [CVE-2026-16879: IBM Db2 Mirror for i authorization bypass](https://junglewise.ai/threats/cve-2026-16879-ibm-db2-mirror-for-i-authorization-bypass) (high, CVSS 8.8, published 14 Aug 2026) - [CVE-2026-17179: IBM Db2 Mirror for i command injection denial of service](https://junglewise.ai/threats/cve-2026-17179-ibm-db2-mirror-for-i-command-injection-denial-of-service) (high, CVSS 8.5, published 14 Aug 2026) - [CVE-2026-16708: IBM Db2 Mirror for i information disclosure via external control of system configuration](https://junglewise.ai/threats/cve-2026-16708-ibm-db2-mirror-for-i-information-disclosure-via-external-control) (high, CVSS 8.3, published 14 Aug 2026) - [CVE-2026-17081: IBM Db2 Mirror for i path traversal arbitrary file write](https://junglewise.ai/threats/cve-2026-17081-ibm-db2-mirror-for-i-path-traversal-arbitrary-file-write) (high, CVSS 8.2, published 14 Aug 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, level on the four before (1). 1 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 3 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 1 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 1 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other IBM technologies - [IBM API Connect](https://junglewise.ai/threats/technologies/api-connect): 207 vulnerabilities - [IBM AIX](https://junglewise.ai/threats/technologies/aix): 181 vulnerabilities - [IBM Langflow](https://junglewise.ai/threats/technologies/langflow-oss): 154 vulnerabilities - [IBM i](https://junglewise.ai/threats/technologies/i): 120 vulnerabilities - [IBM Guardium Data Protection](https://junglewise.ai/threats/technologies/guardium-data-protection): 93 vulnerabilities - [IBM PowerVM VIOS](https://junglewise.ai/threats/technologies/powervm-vios): 73 vulnerabilities - [IBM Vios](https://junglewise.ai/threats/technologies/vios): 72 vulnerabilities - [IBM WebSphere Application Server](https://junglewise.ai/threats/technologies/websphere-application-server): 67 vulnerabilities - [IBM WebSphere Application Server Liberty](https://junglewise.ai/threats/technologies/websphere-application-server-liberty): 56 vulnerabilities - [IBM Verify Identity Access](https://junglewise.ai/threats/technologies/verify-identity-access): 50 vulnerabilities - [IBM Datastage On Cloud Pak For Data](https://junglewise.ai/threats/technologies/datastage-on-cloud-pak-for-data): 48 vulnerabilities - [IBM Mq](https://junglewise.ai/threats/technologies/mq): 46 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "IBM Db2 Mirror For I vulnerabilities", https://junglewise.ai/threats/technologies/db2-mirror-for-i, 13 November 2026.