PT-2026-5450 · Ibm · Db2 For Linux+1

Published 2026-01-30 · Updated 2026-01-31 · CVE-2025-36184

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) versions 11.5.0 through 11.5.9

Description The software may allow an instance owner to execute malicious code, potentially escalating their privileges to root due to the execution of operations with higher-than-minimum required privileges.

Recommendations Update to a newer version that addresses this issue.

Fix

LPE

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2025-36184

Affected Products

Db2 Connect Server

Db2 For Linux

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-36184 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36184 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-36184 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-36184 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-36184 · Security Note
• https://twitter.com/CVEnew/status/2017354530619273522 · Twitter Post
• https://ibm.com/support/pages/node/7257519 · Patch, Vendor Advisory
• https://t.me/CVEtracker/43337 · Telegram Post