Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17029, CVE-2026-18511, CVE-2026-18068, CVE-2026-18086 in Java Secure Sockets Extension JSSE as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17029 DESCRIPTION: IBM i could allow a local attacke...

Security Bulletin: IBM i is Affected By A Prvilege Escalation Vulnerability [CVE-2026-18509]

Summary IBM i is vulnerable to privilege escalation CVE-2026-18509 in Navigator and Debug Service as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18509 DESCRIPTION: IBM i could allow a local authenticated attacker to gain privilege escalation via the...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16674, CVE-2026-18101, CVE-2026-18715 in WebSphere Application Server Liberty as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18101 DESCRIPTION: IBM i could allow a local attacker to gain...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol

Summary IBM i is vulnerable to multiple vulnerabilites CVE-2026-18077, CVE-2026-16815, CVE-2026-16692 in Simple Mail Transfer Protocol SMTP as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18077 DESCRIPTION: IBM i could allow a remote attacker to cause a...

CVE-2026-17642

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-17642 IBM i is Affected By Remote Code Execution Vulnerabilities [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

EUVD-2026-57532

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-17642 IBM i is Affected By Remote Code Execution Vulnerabilities [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-17642

CVE-2026-17642 affects IBM i releases 7.3–7.6 in the Resource Monitoring and Control (RMC) component. It allows a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command (OS Command Injection, CWE-78). The IBM bulletin l...

CVE-2026-18150 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition...

CVE-2026-18150

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition...

CVE-2026-18150

Technical details for CVE-2026-18150 are not publicly available in the provided documents. Please monitor for updates from IBM and standard vulnerability databases for affected versions and remediation guidance.

EUVD-2026-57530

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition...

CVE-2026-18150 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition...

EUVD-2026-57528

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input...

CVE-2026-18099

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input...

CVE-2026-18099 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input...

CVE-2026-18099 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input...

CVE-2026-18099

Affected product: IBM i (7.3, 7.4, 7.5, 7.6). Vulnerability: CVE-2026-18099 allows a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input. Impact: high likelihood of code execution with privileges; CVSS v3.1 base score 8.9 (AV:N/AC...

CVE-2026-18148 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to inject arbitrary content into Navigator log files due to improper output neutralization for logs...