CVE-2025-13108
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
Feb 17, 2026
CISA due date
—
The record
IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an attacker to access sensitive information in memory due to the buffer not properly clearing resources.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|