CVE-2026-18097

IBM Db2 versions 11.5.0 to 11.5.9 and 12.1.0 to 12.1.5 on Linux, UNIX, and Windows are vulnerable due to the logging of plain text passwords in trace files, which can be exploited by local attackers to access sensitive information. Organizations using these Db2 versions should prioritize remediation to mitigate the risk of unauthorized data exposure. This vulnerability is particularly relevant for database administrators and security teams managing Db2 environments.