CVE-2026-3856
Published: 17 March 2026
Summary
CVE-2026-3856 is a medium-severity Missing Support for Integrity Check (CWE-353) vulnerability in Ibm Db2 Recovery Expert. Its CVSS base score is 5.3 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Transmitted Data Manipulation (T1565.002); ranked at the 4.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SC-8 (Transmission Confidentiality and Integrity) and SI-7 (Software, Firmware, and Information Integrity).
Deeper analysis
CVE-2026-3856 is a vulnerability in IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 that arises from an insecure mechanism used for verifying the integrity of data during transmission. This flaw, published on 2026-03-17, could allow an attacker to modify or corrupt data and is classified under CWE-353 (Missing Support for Integrity Check). The CVSS v3.1 base score is 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N), indicating medium severity with primary impact on integrity.
An unauthenticated attacker (PR:N) can exploit this over the network (AV:N) with low attack complexity (AC:L) and no user interaction (UI:N). Exploitation would enable modification or corruption of data in transit, resulting in low integrity impact (I:L), but with no effects on confidentiality (C:N) or availability (A:N) and unchanged scope (S:U).
IBM has published details on mitigation in their security advisory at https://www.ibm.com/support/pages/node/7266272.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-12657
Vulnerability details
IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Missing integrity check on transmitted data (CWE-353) directly enables an attacker to alter/corrupt data in transit (T1565.002 Transmitted Data Manipulation).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly requires protection of information integrity during transmission, addressing the insecure verification mechanism that allows data modification or corruption.
Mandates integrity verification mechanisms for information to detect unauthorized changes, directly mitigating the missing support for integrity checks on transmitted data.
Implements cryptographic protections that can enforce robust integrity checks for data transmitted by the Db2 Recovery Expert.