CVE-2026-17418: Improper Neutralization of Special Elements used in an SQL Command

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an SQL command...

CVE-2026-17222: Improper Neutralization of Special Elements used in an SQL Command

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables due to improper neutralization of special elements used in an SQL command...

CVE-2026-17248: Improper Neutralization of Special Elements used in an OS Command

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements in an OS command...

CVE-2026-16856: Improper Neutralization of Special Elements used in an OS Command

IBM i 7.6, and 7.5 could allow a local attacker to gain elevated privileges due to improper neutralization of special elements used in an OS command...

CVE-2026-18847: Origin Validation Error

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoofing of Navigator for i...

CVE-2026-18144: Improper Authorization

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...

CVE-2026-17094: Improper Limitation of a Pathname to a Restricted Directory

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and manipulate files due to a path traversal vulnerability...

PT-2026-71190

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A remote authenticated attacker can cause a denial of service due to improper neutralization of special elements in an OS command. This issue occurs when the system fails to properly sanitize input us...

PT-2026-71183

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper bounds checking may allow a remote authenticated attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2026-71192

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can bypass security restrictions due to improper neutralization of special elements in an SQL parameter. This issue occurs when the system fails to correctly sanitize...

PT-2026-71159

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can bypass security restrictions because the system does not properly validate session tokens. A session token is a unique identifier used by a server to recognize a...

PT-2026-71189

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can modify data in specific SQL tables. This is caused by improper neutralization of special elements used in an SQL command, a condition known as SQL injection, where...

PT-2026-71184

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper handling of zero-length TCP options...

PT-2026-71271

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of shell metacharacters. This occurs when the system fails to properly filter or escape special characters...

PT-2026-71276

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition...

PT-2026-71269

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer ...

PT-2026-71273

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fails to properly sanitize inp...

PT-2026-71328

Name of the Vulnerable Software and Affected Versions IBM i Access Client Solutions versions 1.1.2.0 through 1.1.9.13 Description A local attacker can execute arbitrary code due to improper neutralization of special elements used in an OS command. This issue occurs when the software fails to...

PT-2026-71156

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A path traversal issue allows a remote authenticated attacker to manipulate files and obtain sensitive information. Path traversal is a flaw that allows an attacker to access files and directories tha...

PT-2026-71165

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authorization may allow a remote authenticated attacker to bypass security restrictions. Recommendations At the moment, there is no information about a newer version that contains a fix for...