CVE-2025-27899: IBM DB2 Recovery Expert

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 discloses sensitive information in an environment variable that could aid in further attacks against the system.

Affected products

• IBM DB2 Recovery Expert: version 5.5.0 only

Published 2026-02-17. Last modified 2026-06-17.