CVE-2025-36407: IBM DB2

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM® Db2® is vulnerable to a denial of service with a specially crafted query that uses ALTER TABLE operations.

Affected products

• IBM DB2: from 11.5.0, up to and including 11.5.9; from 12.1.0, up to and including 12.1.3

Published 2026-01-30. Last modified 2026-06-17.