SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-9762

HIGH · CVSS 7.8 EPSS 0.17% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-17 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

IBM Db2 versions 11.5.0 to 11.5.9 and 12.1.0 to 12.1.4 are susceptible to remote code execution due to a vulnerability in the handling of user-controlled JDBC URLs. This flaw allows an attacker to execute arbitrary code on the affected systems, posing a significant risk to data integrity and system security. Organizations using these Db2 versions should prioritize patching to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-9762
Severity
HIGH
CVSS
7.8
EPSS
0.17%

Original NVD Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.

Related CVEs

Other vulnerabilities affecting the same vendor(s)