VDE-2026-112

METTLER TOLEDO: STARe Software DB2 vulnerable component

view advisory published 2026-10-20

A vulnerability identified as CVE-2026-10109 affects the external component IBM Db2 12.1.2 delivered with STARe v20.00. The vulnerability is associated with improper handling of the pre-authentication DRDA handshake in affected IBM Db2 versions

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-10109US	—	0.86% (58th)	—	2026-06-30
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling.

references

External citations — patches, advisories, analysis.

VDE-2026-112: METTLER TOLEDO: STARe Software DB2 vulnerable component - HTMLself
CERT@VDE Security Advisories for METTLER TOLEDOexternal
VDE-2026-112: METTLER TOLEDO: STARe Software DB2 vulnerable component - CSAFself
Product security website of METTLER TOLEDOexternal

remediations (1)

FixedIBM DB2 12.1.2 external component of STARe Software V20.00
Update DB2 to version 12.1.4 Update 87349
https://swupdateamc.mt.com/

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan