Back to overview

CVE-2026-7771

MEDIUM
5.5
CVSS 3.1
Description
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service.

Metadata

CVE ID
CVE-2026-7771
State
PUBLISHED
Assigner
ibm
Reserved
2026-05-04 14:17 UTC
Published
2026-07-17 19:16 UTC
Last updated
2026-07-17 19:16 UTC
Primary CWE
CWE-835
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop…
Vendor / Product
IBM / Db2
Sources
cve.org  ·  NVD

Severity & Metrics

5.5 MEDIUM CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products (1)
VendorProductPlatformVersions
IBM Db2 — 11.5.0 ≤ 11.5.9, 12.1.0 ≤ 12.1.4
Weakness (CWE)
CWESourceDescription
CWE-835 cna CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
CVSS scores (1)
ScoreSeverityVersionSourceVector
5.5 MEDIUM 3.1 cna CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References (1)
Back to overview