Cyber Resilience

CVE-2026-1718

HighDDoS

Published: 27 May 2026

Published
27 May 2026
Modified
02 June 2026
KEV Added
Patch
CVSS Score v3.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
EPSS Score 0.0038 29.4th percentile
Risk Priority 14 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-1718 is a high-severity Allocation of Resources Without Limits or Throttling (CWE-770) vulnerability in Ibm Db2. Its CVSS base score is 7.1 (High).

Operationally, ranked at the 29.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service with a specially crafted query when autonomous transactions are enabled.

CWE(s)

Related Threats

CVEs Like This One

CVE-2024-41743Same product: Linux Linux Kernel
CVE-2024-41742Same product: Linux Linux Kernel
CVE-2026-6938Same product: Ibm Db2
CVE-2025-36070Same product: Ibm Db2
CVE-2026-6052Same product: Ibm Db2
CVE-2026-6051Same product: Ibm Db2
CVE-2024-43178Same product: Linux Linux Kernel
CVE-2025-13726Same product: Linux Linux Kernel
CVE-2024-51476Same product: Linux Linux Kernel
CVE-2025-13723Same product: Linux Linux Kernel

Affected Assets

ibm
db2
11.5.0 — 11.5.9 · 12.1.0 — 12.1.4

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-770

This control implements explicit throttling on session allocation, addressing the weakness of allocating resources without limits.

addresses: CWE-770

Plan testing exercises resource allocation limits and throttling during simulated failures, directly addressing weaknesses that allow unbounded resource use.

addresses: CWE-770

Contingency plan updates ensure recovery strategies address unbounded resource allocation, making it harder for attackers to exploit lack of throttling to cause prolonged outages.

addresses: CWE-770

Provides continuity when unbounded resource allocation at the primary site leads to exhaustion and downtime.

addresses: CWE-770

Alternate services allow operations to continue when primary allocation of resources lacks limits or throttling.

addresses: CWE-770

Explicit planning of security-related actions requires defining limits, windows, and resource allocations, making allocation without throttling far less likely.

addresses: CWE-770

Measures of performance include tracking allocation behavior and throttling effectiveness, reducing the window for resource exhaustion attacks.

addresses: CWE-770

Imposes an inactivity-based limit on network resource allocation, throttling the number of concurrently held connections.

References