8734 matches found
CVE-2026-17077
IBM i 7.6, 7.5, 7.4, and 7.3 are affected by CVE-2026-17077 due to the use of an uninitialized variable in DRDA/DDM processing, enabling a remote attacker to cause a denial of service (CVSS v3.1 base score 5.3). The IBM security bulletin lists remediation by applying PTFs: 7.6 SJ10848, 7.5 SJ1084...
EUVD-2026-58395
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitialized variable...
CVE-2026-17076 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests...
CVE-2026-17076
IBM i 7.3–7.6 are affected by CVE-2026-17076, a denial-of-service vulnerability from improper processing of DRDA and DDM resynchronization requests. Affects IBM i releases 7.3, 7.4, 7.5, and 7.6. Remediations are provided as PTFs: 7.3 SJ10851, 7.4 SJ10850, 7.5 SJ10849, 7.6 SJ10848. The advisory n...
EUVD-2026-58394
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests...
EUVD-2026-58393
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management...
CVE-2026-17074 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management...
CVE-2026-17074
CVE-2026-17074 affects IBM i versions 7.6, 7.5, 7.4, and 7.3 in the DRDA/DDM (Distributed Relational Database Architecture / Distributed Data Management) component. The root cause is improper privilege management (CWE-269), allowing a remote authenticated attacker to bypass security restrictions....
CVE-2026-17071
CVE-2026-17071 affects IBM i 7.3–7.6. A remote authenticated attacker can perform file manipulation due to a path traversal flaw in Digital Certificate Manager. The vulnerability is rooted in improper path handling, enabling manipulation of files when authenticated over the network. Affected IBM ...
CVE-2026-17071 IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...
EUVD-2026-58392
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...
CVE-2026-17223
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow...
CVE-2026-18846
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server DoS for that server...
CVE-2026-17229
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop...
CVE-2026-17043
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to delete arbitrary files due to path traversal...
CVE-2026-17069
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of anti-CSRF tokens...
CVE-2026-17199
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to unbounded resource allocation...
CVE-2026-17045
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform unauthorized operations and access sensitive information due to improper session management...