IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.

高危 CVSS 7.8

CVECVE-2026-9762

首次发现2026-07-17 20:31 UTC

披露时间2026-07-17 18:17 UTC

最后更新2026-07-18 06:15 UTC

通道状态auto

摘要

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。