CVE-2025-36186 – IBM Db2 privilege escalation

CVE ID : CVE-2025-36186

Published : Nov. 7, 2025, 7:16 p.m. | 13 minutes ago

Description : IBM Db2 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) under specific configurations could allow a local user to execute malicious code that escalate their privileges to root due to execution of unnecessary privileges operated at a higher than minimum level.

Severity: 7.4 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…