PT-2026-71160

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authorization in the handling of high-authority threads allows a remote authenticated attacker to escalate privileges. Recommendations At the moment, there is no information about a newer...

PT-2026-71188

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description An out-of-bounds write allows a remote attacker to execute arbitrary code. An out-of-bounds write occurs when a program writes data past the end of the intended buffer, potentially overwriting adjacen...

PT-2026-71169

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

PT-2026-71273

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fails to properly sanitize inp...

PT-2026-71163

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw...

PT-2026-71168

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A race condition allows a remote authenticated attacker to bypass security restrictions and obtain sensitive information. A race condition is a situation where the system's behavior depends on the...

PT-2026-71162

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can modify SQL tables because the system fails to properly neutralize special elements used within an SQL command, leading to an SQL injection issue. Recommendations...

PT-2026-71268

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can gain elevated privileges due to improper validation of a client-supplied profile name. Recommendations At the moment, there is no information about a newer version...

PT-2026-71154

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

PT-2026-71157

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to unsafe reflection...

PT-2026-71328

Name of the Vulnerable Software and Affected Versions IBM i Access Client Solutions versions 1.1.2.0 through 1.1.9.13 Description A local attacker can execute arbitrary code due to improper neutralization of special elements used in an OS command. This issue occurs when the software fails to...

PT-2026-71322

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a configuration...

PT-2026-71192

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can bypass security restrictions due to improper neutralization of special elements in an SQL parameter. This issue occurs when the system fails to correctly sanitize...

PT-2026-71189

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can modify data in specific SQL tables. This is caused by improper neutralization of special elements used in an SQL command, a condition known as SQL injection, where...

PT-2026-71161

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A local authenticated attacker can cause a denial of service due to improper neutralization of special elements used in an SQL command. Recommendations At the moment, there is no information about a...

PT-2026-71321

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...

PT-2026-71164

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied path input...

Security Bulletin: IBM Db2 Mirror for i is affected by multiple vulnerabilities

Summary The IBM Db2 Mirror for i GUI is affected by multiple vulnerabilities CVE-2026-17186, CVE-2026-17184, CVE-2026-17182, CVE-2026-17181, CVE-2026-16879, CVE-2026-17179, CVE-2026-16915, CVE-2026-17175, CVE-2026-18554, CVE-2026-17079, CVE-2026-16905, CVE-2026-17227, CVE-2026-17209,...

Security Bulletin: IBM i is Affected By A Denial of Service Vulnerability DST/SST [CVE-2026-16887]

Summary IBM i is vulnerable to a denial of service due to an out-of-bounds write CVE-2026-16887 in Dedicated System Tools DST / System Service Tools SST as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16887 DESCRIPTION: IBM i could allow a remote attacker t...

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerability [CVE-2026-16860]

Summary IBM i is vulnerable to a remote code execution vulnerability due to an uncontrolled search path element CVE-2026-16860 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16860 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute...