CVE-2026-3856

9.1 criticalEPSS 0.2%

Critical (9.1) in ibm db2 recovery expert. EPSS 0.2% chance of exploitation in the next 30 days.

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-353
Published: 2026-03-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:db2_recovery_expert

References

https://www.ibm.com/support/pages/node/7266272

Check your stack JSON