EUVD-2026-57381

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16863 IBM i is Affected By Out-of-Bounds Read Vulnerability []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16863

IBM i 7.3–7.6 (5770-999) are affected by CVE-2026-16863 due to an out-of-bounds read that could allow a remote authenticated attacker to obtain sensitive information. The vulnerability affects the specified IBM i releases, with CVSS v3.1 base score 7.7 (Network, Low complexity, Privileges Require...

CVE-2026-16860

CVE-2026-16860 affects IBM i releases 7.3–7.6 (5770-SS1). A remote authenticated attacker can execute arbitrary code due to an uncontrolled search path element. The vulnerability, tracked by IBM with a base CVSS v3.1 score of 9.9 (CRITICAL), is triggered by improper handling of search paths in th...

CVE-2026-16860 IBM i is Affected By Remote Code Execution Vulnerability []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element...

EUVD-2026-57379

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element...

EUVD-2026-57378

IBM i 7.6, and 7.5 could allow a remote authenticated attacker to execute arbitrary commands with elevated privileges due to improper neutralization of special elements used in an OS command...

CVE-2026-16906 IBM i is Affected By Multiple Vulnerabilities in Domain Name System

IBM i 7.6, and 7.5 could allow a remote authenticated attacker to execute arbitrary commands with elevated privileges due to improper neutralization of special elements used in an OS command...

EUVD-2026-57375

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management...

CVE-2026-17109 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection...

CVE-2026-17109

IBM i versions 7.3–7.6 are affected by CVE-2026-17109. A remote authenticated attacker could inject unexpected parameters into a command due to parameter handling/injection in SQL-related processing. Affected: IBM i 7.3, 7.4, 7.5, 7.6 (5770-SS1). Impact per CVSSv3.1: 4.3 (Availability impact: Low...

CVE-2026-17420

CVE-2026-17420 affects IBM i 7.6, 7.5, 7.4 and 7.3. The issue stems from improper neutralization of special elements in an SQL parameter, enabling a remote authenticated attacker to bypass security restrictions. Exploitation details are not provided beyond this description in the bulletin. Remedi...

CVE-2026-17420 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements in an SQL parameter...

CVE-2026-17222 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables due to improper neutralization of special elements used in an SQL command...

CVE-2026-17222

IBM i CVE-2026-17222 affects IBM i 7.6, 7.5, 7.4, and 7.3 (5770-SS1) where an authenticated remote attacker could modify data in certain SQL tables due to improper neutralization of special elements in an SQL command. The IBM security bulletin lists related SQL vulnerabilities and provides fixes ...

EUVD-2026-57372

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables due to improper neutralization of special elements used in an SQL command...

EUVD-2026-57366

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

CVE-2026-17419

IBM i (7.3–7.6) with 5770-SS1 is affected by CVE-2026-17419 due to improper neutralization of special elements in SQL commands, enabling a remote authenticated attacker to modify SQL tables. Affected versions include 7.3, 7.4, 7.5, and 7.6. CVSS 3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H...

CVE-2026-17419 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

CVE-2026-17419

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...