EUVD-2026-58463

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and element-count confusion...

EUVD-2026-58462

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking...

CVE-2026-18020 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking...

CVE-2026-18020

IBM i NetServer on IBM i 7.3–7.6 is affected by CVE-2026-18020 due to an off-by-one error in bounds checking that could allow a remote attacker to cause a denial of service. The vulnerability is rooted in NetServer processing and is listed among several IBM i CVEs in the IBM Security Bulletin. Re...

CVE-2026-17649

CVE-2026-17649 affects IBM i 7.3–7.6 via the NetServer component. A remote attacker could obtain sensitive information due to an out-of-bounds read. IBM lists affected releases and provides PTF fixes: 7.6 MJ10939, 7.5 MJ10938, 7.4 MJ10937, 7.3 MJ10936 (see IBM bulletin). Base score ~5.3 (CVSS3.1)...

CVE-2026-17649 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

EUVD-2026-58461

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-17502 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

CVE-2026-17502 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

CVE-2026-17502

CVE-2026-17502 affects IBM i 7.3–7.6 in NetServer. Description: a remote attacker could cause a denial-of-service via an out-of-bounds write. IBM lists the remediation as PTF fixes for each release: 7.6 MJ10939, 7.5 MJ10938, 7.4 MJ10937, 7.3 MJ10936, with fix-information links provided by IBM. No...

EUVD-2026-58460

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

CVE-2026-17476

IBM i 7.3–7.6 are affected by CVE-2026-17476, a remote-denial-of-service flaw caused by an improper buffer write. The vulnerability affects IBM i releases 7.3, 7.4, 7.5, and 7.6 and can be triggered remotely without user interaction. IBM’s bulletin lists multiple CVEs (including CVE-2026-17476) i...

EUVD-2026-58457

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write...

CVE-2026-17476 IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write...

EUVD-2026-58455

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management...

CVE-2026-17438

IBM i 7.3–7.6 are affected by CVE-2026-17438 due to improper privilege management in LDAP, enabling a local attacker to obtain sensitive information or modify data. Vulnerable components: LDAP on IBM i with 5770-SS1; CVSS v3.1 base score 4.4 (L: local attack, low complexity, low privileges requir...

CVE-2026-17438

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management...

CVE-2026-17438 IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management...

EUVD-2026-58453

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information and perform unauthorized operations due to improper validation of authentication tokens...

CVE-2026-17075

IBM i 7.3 through 7.6 is vulnerable (CWE-287: Improper Authentication) to remote attackers obtaining sensitive information and performing unauthorized operations via improper authentication token validation. Fixes are available: PTF SJ10904 for 7.3, SJ10905 for 7.4, SJ10906 for 7.5, and SJ10907 f...