CVE-2026-18567: IBM DB2 Mirror For I

Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days.

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory.

Affected products

• IBM DB2 Mirror For I: from 7.4, up to and including 7.6

Published 2026-09-04. Last modified 2026-09-08.