CVE-2025-36186

—

CVSS 3.1

7.8 high

EPSS

<1%p2

Published

Nov 7, 2025 (Nov 7, 2025)

Modified

Jun 17, 2026

Description

IBM Db2 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) under specific configurations could allow a local user to execute malicious code that escalate their privileges to root due to execution of unnecessary privileges operated at a higher than minimum level.

Vendors: ibm
Products: db2
Weakness: CWE-250
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.