Description
IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4Attack Vector: Network
Complexity: Low
Privileges: None
User Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: Low
Availability: None
Affected Packages2 packages
🔴Vulnerability Details
3GHSAGHSA-c57j-h24c-r8gw: IBM Db2 Recovery Expert for Linux, UNIX and Windows 5↗2026-03-18 OSVCVE-2026-3856: (IBM Db2 Recovery Expert for Linux, UNIX and Windows 5↗2026-03-18 CVEListIBM Db2 Recovery Expert Missing Integrity Check↗2026-03-17 📋Vendor Advisories
3MicrosoftChromium: CVE-2026-5292 Out of bounds read in WebCodecs↗2026-04-02 MicrosoftMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability↗2026-03-10 MicrosoftChromium: CVE-2026-3910 Inappropriate implementation in V8↗2026-03-10 🕵️Threat Intelligence
1WizCVE-2026-3856 Impact, Exploitability, and Mitigation Steps | Wiz↗