CVE-2026-18567

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory.

View graph Watch Export

CVSS v3.1

4.4 MEDIUM

EPSS

0.07%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

EPSS Trend

Sep 6, 2026 → Sep 10, 2026

● 0.01pp

0.08% → 0.07% over 2 tracked changes

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

ScopeUNCHANGED

ConfidentialityLOW

IntegrityNONE

AvailabilityLOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Connections

2 relationships

CWE-367

source

Timeline

disclosure → media coverage

Sep 4, 2026

Disclosure — published as a CVE record.