CVE-2025-36009

Medium · 6.5

CVSS

6.5

EPSS

0.4%

Published

Jan 30, 2026

CISA due date

—

The record

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service due to excessive use of a global variable.

Affected packages

Ecosystem	Package	Introduced	Fixed