CVE-2026-16708 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration...

Vulnerabilities present in the IBM i operating system due to IBM

IBM has uncovered vulnerabilities in IBM i operating system versions 7.3, 7.4, 7.5, and 7.6. These vulnerabilities relate to various aspects of the IBM i operating system, including improper privilege management, unmanaged search path elements, out-of-bounds reads and writes, buffer overflows bot...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Host Servers

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17223, CVE-2026-17206, CVE-2026-17208, CVE-2026-16929, CVE-2026-17004, CVE-2026-18846, CVE-2026-17197, CVE-2026-17217, CVE-2026-17199, CVE-2026-17229, CVE-2026-16982 in host servers, and a buffer overflow CVE-2026-17220 in host,...

PT-2026-72094

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A remote authenticated attacker can bypass security restrictions because server-side input validation can be disabled through a request parameter. Recommendations Update IBM Db2 Mirror...

PT-2026-72102

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Remote attackers can execute arbitrary code because the software allows external control of file names or paths. Recommendations At the moment, there is no information about a newer...

CVE-2026-17184: External Control of File Name or Path

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path...

PT-2026-72107

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A remote authenticated attacker can obtain sensitive information because the software does not properly limit pathnames to restricted directories. Recommendations At the moment, there i...

PT-2026-72103

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Improper neutralization of special elements in a command allows a remote attacker to execute arbitrary CL Control Language commands. CL is a command-line interface used to manage system...

PT-2026-72098

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A remote attacker can cause a denial of service due to uncontrolled recursion, which occurs when a function calls itself repeatedly without a proper termination condition, leading to...

CVE-2026-17182: Improper Authentication

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments...

CVE-2026-16915: Improper Limitation of a Pathname to a Restricted Directory

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

PT-2026-72093

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Improper input validation may allow a remote authenticated attacker to obtain sensitive information. Recommendations At the moment, there is no information about a newer version that...

PT-2026-72090

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Remote attackers can obtain sensitive information because the system configuration is subject to external control. Recommendations At the moment, there is no information about a newer...

PT-2026-72095

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Improper limitation of a pathname to a restricted directory allows a remote attacker to write arbitrary files. Recommendations Update IBM Db2 Mirror for i version 7.4 to a fixed release...

CVE-2026-17081: Improper Limitation of a Pathname to a Restricted Directory

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-17175: Improper Authentication

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement...

CVE-2026-17209: Improper Neutralization of Input During Web Page Generation

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting...

CVE-2026-18178: Improper Limitation of a Pathname to a Restricted Directory

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal...

CVE-2026-17186: Improper Neutralization of Special Elements used in an OS Command

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command...

PT-2026-72099

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A remote authenticated attacker can cause a denial of service through command injection, which occurs when an application passes unsafe user-supplied data to a system shell...