CVE-2026-10535

IBM Db2 versions 11.5.0 to 11.5.9 and 12.1.0 to 12.1.4 are susceptible to a buffer overflow vulnerability in the setgid helper db2flacc, which could allow an attacker to execute arbitrary code with elevated privileges. Organizations using these versions of Db2 should prioritize patching this vulnerability to mitigate the risk of unauthorized access and potential system compromise. Immediate action is recommended for environments where Db2 is deployed, particularly those handling sensitive data.