CVE-2026-17463: 
IBM Db2 vulnerability analysis and mitigation

CVE-2026-17463 is a denial-of-service vulnerability in IBM Db2 caused by uncontrolled resource consumption (CWE-400). It affects IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 for Linux, UNIX, and Windows, including DB2 Connect Server. A remote authenticated attacker with low-level privileges can exploit this vulnerability over the network to exhaust resources and render the database service unavailable. It carries a CVSS v3.1 base score of 6.5 (Medium) (IBM Advisory).

The vulnerability is classified under CWE-400 (Uncontrolled Resource Consumption), meaning the application fails to properly limit the amount of resources it allocates in response to attacker-controlled input. An authenticated attacker with low privileges can send specially crafted requests over the network that trigger excessive resource consumption within the Db2 service. No user interaction is required, and attack complexity is low. Related attack patterns include XML Ping of the Death (CAPEC-147) and Regular Expression Exponential Blowup (CAPEC-492), suggesting the root cause may involve unbounded processing of certain input types (IBM Advisory).

Successful exploitation results in a denial-of-service condition, crashing or making the IBM Db2 database service unavailable. There is no impact to confidentiality or integrity — only availability is affected. Organizations relying on Db2 for critical database operations could experience significant service disruption, potentially affecting dependent applications and business processes (IBM Advisory).

There is no public proof-of-concept exploit available, and no evidence of active in-the-wild exploitation has been observed as of the disclosure date. The EPSS score is 0.0, reflecting a currently low probability of exploitation. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation is not fully automatable per NVD SSVC assessment, as it requires authenticated access (IBM Advisory).

IBM has released a patch addressing this vulnerability, available through the IBM support page. Affected users should apply the fix for their respective version (11.5.x or 12.1.x) as soon as possible. As interim mitigations, administrators should restrict Db2 network access to trusted users and network segments, implement connection rate limiting where supported, and monitor Db2 resource consumption for anomalous patterns that may indicate exploitation attempts (IBM Advisory).