CVE-2026-17216

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers...

CVE-2026-17272

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow...

CVE-2026-17071

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...

CVE-2026-17076

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests...

CVE-2026-17077

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitialized variable...

CVE-2026-17078

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to resource exhaustion...

CVE-2026-17088

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability...

CVE-2026-17075

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information and perform unauthorized operations due to improper validation of authentication tokens...

CVE-2026-17074

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management...

CVE-2026-18715 IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper processing of XML external entities...

EUVD-2026-58474

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper processing of XML external entities...

CVE-2026-18715

CVE-2026-18715 affects IBM i versions 7.6, 7.5, 7.4, and 7.3. The issue arises from improper processing of XML external entities, allowing a remote authenticated attacker to obtain sensitive information. The vulnerability has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Privileg...

EUVD-2026-58473

IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request processing. The attacker could exploit this vulnerability to cause a temporary denial of service...

CVE-2026-18671 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request processing. The attacker could exploit this vulnerability to cause a temporary denial of service...

CVE-2026-18671

CVE-2026-18671 affects IBM i releases 7.3–7.6. An authenticated attacker can trigger a NetServer thread exception due to an integer overflow during bounds checking in request processing, causing a temporary denial of service. Affected products: IBM i 7.3, 7.4, 7.5, 7.6. The IBM Security Bulletin ...

EUVD-2026-58470

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the Native IBM i JSSE provider, caused by improper bounds checking during TLS session establishment. A local attacker could overflow a fixed-length buffer and execute arbitrary cod...

CVE-2026-18511 IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the Native IBM i JSSE provider, caused by improper bounds checking during TLS session establishment. A local attacker could overflow a fixed-length buffer and execute arbitrary cod...

CVE-2026-18511 IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the Native IBM i JSSE provider, caused by improper bounds checking during TLS session establishment. A local attacker could overflow a fixed-length buffer and execute arbitrary cod...

CVE-2026-18511

IBM i 7.3–7.6 is affected by CVE-2026-18511. The vulnerability arises in the Native IBM i JSSE provider during TLS session establishment due to improper bounds checking, allowing a local authenticated attacker to overflow a fixed-length buffer and potentially execute arbitrary code or crash the J...

CVE-2026-18509

CVE-2026-18509 affects IBM i 7.3–7.6 (5770-SS1). The vulnerability enables a local authenticated attacker to escalate privileges via the Navigator for i debugger, potentially allowing access to or manipulation of sensitive data or creation of elevated user profiles. Root cause aligns with imprope...