IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to obtain sensitive information due to the logging of p…

Medium CVSS 5.5

CVECVE-2026-18097

First seen2026-08-13 23:15 UTC

Disclosed2026-08-12 21:17 UTC

Last updated2026-08-13 23:15 UTC

Channel statusauto

Summary

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://www.ibm.com/support/pages/node/7282952

Timeline

2026-08-13 nvd_ingest NVD