CVE-2026-17197 IBM i is Affected By Multiple Vulnerabilities in Host Servers

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of client-asserted identity...

CVE-2026-18071 IBM i is Affected By An Improper Management Vulnerability in HTTP Server []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-18071 IBM i is Affected By An Improper Management Vulnerability in HTTP Server []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper privilege management...

EUVD-2026-58227

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-18071

IBM i 7.6, 7.5, 7.4, and 7.3 are affected by CVE-2026-18071 due to improper privilege management in the HTTP Server, enabling a local attacker to gain elevated privileges (CWE-269). Base CVSS v3.1 score is 7.8 (HIGH) with LOCAL, low attack complexity, requiring LOW privileges and no user interact...

CVE-2026-70464

rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake process before or after module selection without triggering the I/O timeout. Attackers can open many simultaneous...

AZL-95840 CVE-2026-70462 affecting package rsync for versions less than 3.5.0-1

rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSGIOTIMEOUT messages carrying non-positive zero or negative values. Attackers can craft malicious MSGIOTIMEOUT...

ALPINE-CVE-2026-70462

rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSGIOTIMEOUT messages carrying non-positive zero or negative values. Attackers can craft malicious MSGIOTIMEOUT...

EUVD-2026-58042

rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSGIOTIMEOUT messages carrying non-positive zero or negative values. Attackers can craft malicious MSGIOTIMEOUT...

CVE-2026-70462

rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSGIOTIMEOUT messages carrying non-positive zero or negative values. Attackers can craft malicious MSGIOTIMEOUT...

EUVD-2026-57599

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive information due to an integer underflow...

CVE-2026-18509: Improper Authorization

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation via the Navigator for i debugger. This could allow the attacker to access or manipulate sensitive data on the system, or create new profiles with elevated privileges on the IBM i system...

PT-2026-71862

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A local authenticated attacker can achieve privilege escalation through the Navigator for i debugger. This flaw allows the attacker to access or modify sensitive system data or create new user profile...

CVE-2026-16982: Out-of-bounds Write

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a heap buffer overflow...

PT-2026-71740

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop...

PT-2026-71842

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authentication may allow a remote attacker to execute arbitrary code or obtain sensitive information. Recommendations At the moment, there is no information about a newer version that contain...

PT-2026-71858

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper bounds checking may allow a local attacker to execute arbitrary code or cause a denial of service. Recommendations At the moment, there is no information about a newer version that contains a...

PT-2026-71814

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authentication during NTLM New Technology LAN Manager, a suite of Microsoft security protocols session negotiation allows a remote attacker to access server resources with the privileges of a...

CVE-2026-16896: Time-of-check Time-of-use (TOCTOU) Race Condition

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...

PT-2026-71813

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A remote attacker can cause a denial of service due to an out-of-bounds read, which occurs when the system reads data past the end of the intended buffer. Recommendations At the moment, there is no...