PT-2026-71171

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A remote unauthenticated attacker can harvest credentials by spoofing Navigator for i. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2026-71164

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can obtain sensitive information because the system does not properly validate user-supplied path input. This issue involves a path traversal flaw, where an attacker can...

PT-2026-71157

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A remote authenticated attacker can bypass security restrictions due to unsafe reflection. Reflection is a process that allows a program to inspect and modify its own structure and behavior at runtime...

PT-2026-71169

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

PT-2026-71354

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description An integer underflow allows a remote attacker to cause a denial of service and obtain sensitive information. An integer underflow occurs when an arithmetic operation results in a value smaller than th...

PT-2026-71163

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description An XML injection flaw allows a remote authenticated attacker to obtain sensitive information and compromise system integrity. XML injection occurs when an application processes external XML input...

CVE-2026-17109: Improper Input Validation

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection...

PT-2026-71154

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description An authenticated user can embed arbitrary JavaScript code into the Web UI. This stored cross-site scripting issue allows for the alteration of intended functionality, which could potentially lead to t...

PT-2026-71188

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description An out-of-bounds write allows a remote attacker to execute arbitrary code. An out-of-bounds write occurs when a program writes data past the end of the intended buffer, potentially overwriting adjacen...

CVE-2026-17276: Improper Privilege Management

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privileges due to improper authorization in the handling of high-authority threads...

PT-2026-71167

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to an interpretation conflict in the multipart parser...

PT-2026-71180

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element...

PT-2026-71170

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

CVE-2026-18246: Interpretation Conflict

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to an interpretation conflict in the multipart parser...

CVE-2026-17485: Out-of-bounds Read

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive information due to an integer underflow...

CVE-2026-18098: Origin Validation Error

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw...

PT-2026-71179

Name of the Vulnerable Software and Affected Versions IBM i version 7.5 IBM i version 7.6 Description An issue exists where improper neutralization of special elements used in an OS command could allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no...

PT-2026-71191

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper validation of input size may allow a remote attacker to cause a denial of service. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2026-17271: Allocation of Resources Without Limits or Throttling

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of input size...

PT-2026-71162

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can modify SQL tables because the system fails to properly neutralize special elements used within an SQL command, leading to an SQL injection issue. Recommendations...