CVE-2026-18104

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook (ECB) mode for encryption.

• CWE-327

• https://www.ibm.com/support/pages/node/7289246Patch, Vendor Advisory

Published

Sep 24, 2026

Last Modified

Sep 29, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-18099IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authentica…5.4
• CVE-2026-1810A vulnerability was detected in bolo-blog bolo-solo up to 2.…8.8
• CVE-2026-18100The MetForm – Contact Form, Survey, Quiz, & Custom Form Buil…6.4
• CVE-2026-18101IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to…8.8
• CVE-2026-18102IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authentica…4.3
• CVE-2026-18103A flaw was found in dhcp-server. A remote attacker with netw…4.9
• CVE-2026-18105An uncontrolled resource consumption vulnerability in Firewa…6.5
• CVE-2026-18106IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authentica…4.3
• CVE-2026-18107A flaw was found in CRIU's handling of restartable sequences…7.8
• CVE-2026-18108Net::SAML2 versions before 0.86 for Perl allow authenticatio…9.8
• CVE-2026-18109The W3 Total Cache plugin for WordPress is vulnerable to Sto…7.2
• CVE-2026-1811A flaw has been found in bolo-blog bolo-solo up to 2.6.4. Th…8.8