PT-2026-71855

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking...

CVE-2026-17485

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive information due to an integer underflow...

CVE-2026-19014

A flaw was found in Consul. A remote attacker could exploit an uncontrolled resource consumption vulnerability in the Connect authorization endpoint. This flaw allows a caller to continuously grow the agent's intention-match cache, bypassing configured cache limits. The primary consequence is a...

CVE-2026-18150

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition...

CVE-2026-17445

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of an attacker-supplied user profile name...

CVE-2026-17642

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-17111

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-17082

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of a client-supplied profile name...

CVE-2026-12359

Summary: CVE-2026-12359 affects IBM Security Verify Access and IBM Verify Identity Access families (and containers) with versions 10.0–10.0.9.2, 11.0–11.0.3, and corresponding containers. Affected component is the reverse proxy’s handling of HTTP requests, described as an inconsistent interpretat...

CVE-2026-12359

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow a remote attacker to access sensitive information due to an inconsistent interpretation of an HTTP request by a reverse prox...

CVE-2026-12359 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow a remote attacker to access sensitive information due to an inconsistent interpretation of an HTTP request by a reverse prox...

CVE-2026-18150

Technical details for CVE-2026-18150 are not publicly available in the provided documents. Please monitor for updates from IBM and standard vulnerability databases for affected versions and remediation guidance.

CVE-2026-18150 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition...

CVE-2026-18150

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition...

CVE-2026-17111 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

EUVD-2026-57523

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-17111

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-17111

IBM i versions 7.6, 7.5, 7.4, and 7.3 are vulnerable to CWE-89 SQL injection in the SQL component, allowing remote attackers to view, add, modify, or delete backend database data. NVD rates it CVSS 9.8 (critical); IBM rates 7.6 (high, requiring low privileges). Fixes: PTF SJ10867 (7.6), SJ10868 (...

CVE-2026-17082

IBM i 7.3–7.6 (5770-SS1) contains CVE-2026-17082 in the Debug Server: remote authenticated attackers can gain elevated privileges due to improper validation of a client-supplied profile name. CVSS v3.1 base score 8.8 (HIGH) with network attack vector, low attack complexity, and privileges require...

CVE-2026-17082 IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of a client-supplied profile name...