CVE-2026-18554

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are vulnerable to a security flaw that enables remote authenticated attackers to access sensitive information by exploiting improper pathname restrictions to a restricted directory. Organizations using these versions should prioritize patching this vulnerability to mitigate the risk of unauthorized data exposure. Immediate action is recommended for environments handling sensitive data or regulated information.