CVE-2026-3856

Summary

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission.

Affected Software

VendorProductVersion RangeStatus
IBMDb2 Recovery Expert5.5 IF 2affected

Weaknesses

  • CWE-353: CWE-353 Missing support for integrity check

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References