PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-104364 IBM CVE debrief

IBM Db2 vulnerability CVE-2026-104364 allows local attackers to cause denial of service due to improper input validation. Affected versions include 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5. The vulnerability requires verification of affected versions, patching priority, and monitoring for potential attacks. Db2 administrators, IT security teams, and system operators should assess exposure and prioritize patching. The CVE record and source item provide details on the vulnerability, affected versions, and a reference to the vendor advisory.

Vendor
IBM
Product
Db2
CVSS
LOW 3.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-12
Original CVE updated
2026-10-12
Advisory published
2026-10-12
Advisory updated
2026-10-12

Who should care

Db2 administrators, IT security teams, and system operators responsible for IBM Db2 installations should assess exposure and prioritize patching.

Why it matters

CVE-2026-104364 is a low-severity denial of service vulnerability in IBM Db2 that requires verification of affected versions, patching priority, and monitoring for potential attacks.

  • Potential denial of service attacks by local attackers
  • Need for verification of affected versions and exposure
  • Priority for patching and updating Db2 installations
  • Monitoring for unusual activity indicative of potential attacks

Technical summary

CVE-2026-104364 is a denial of service vulnerability in IBM Db2 due to improper input validation, affecting versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5. The vulnerability allows local attackers to cause denial of service. Db2 administrators should prioritize patching to prevent local denial of service attacks. The CVE record and source item provide details on the vulnerability and affected versions.

Defensive priority

Db2 administrators should prioritize patching to prevent local denial of service attacks

Recommended defensive actions

  • Apply patches for IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5
  • Review and update inventory of Db2 installations to ensure accurate version tracking
  • Monitor Db2 systems for unusual activity indicative of potential denial of service attempts

Evidence notes

The CVE record and source item provide details on the vulnerability, affected versions, and a reference to the vendor advisory. Evidence is limited to public CVE Program records and source item details. Defenders should verify affected versions, assess exposure, and prioritize patching based on the provided information.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-104364 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-104364

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-104364 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-104364

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • IBM® Db2® Denial of Service

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/104xxx/CVE-2026-104364.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://www.ibm.com/support/pages/node/7291615

    Supplemental source - vendor-advisory, patch

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.