CVE-2026-17262

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

EUVD-2026-83299

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

CVE-2026-18869

IBM i versions 7.3 through 7.6 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the FTP service. Improper validation of PORT and EPRT commands allows a remote authenticated attacker to bypass security restrictions and access internal network services . The CVSS 3.1 base score...

CVE-2026-17262 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

CVE-2026-17262

IBM i versions 7.3 through 7.6 are vulnerable to denial of service and security restriction bypass due to improper validation of FTP authentication commands (CWE-78, OS Command Injection). A local attacker on an adjacent network with no required privileges can exploit this with low complexity, re...

EUVD-2026-83295

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

CVE-2023-45182

CVE-2023-45182 IBM i Access Client Solutions 1.1.9.4 - 취약한 비밀번호 암호화 타임라인 취약점 공급업체에 보고: 22.09.2023 수정된 1.1.9.4 버전 출시: 08.12.2023 공개 공개: 15.12.2023 설명 IBM i Access Client Solutions는 사용자 비밀번호를 저장하기 위해 AES 알고리즘을 사용하지만, 16바이트 암호화 키는 정적 문자열Thanatos과 다른 정적 문자열Behemoth과 사용자 이름, 사용자의 홈 폴더, OS예: Linux, 그리고...

CVE-2023-45184

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Нарушение контроля доступа локального сервера. Хронология Уязвимость сообщена вендору: 22.09.2023 Выпущена исправленная версия 1.1.9.4: 08.12.2023 Публичное раскрытие: 15.12.2023 Описание IBM i Access Client Solutions для хранения временного...

cve-2023-30990

cve-2023-30990-rce IBM i DDM Неаутентифицированное RCE - Java Reverse Shell...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in NTP

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-63379, CVE-2026-63381, CVE-2026-63382, CVE-2026-63383, CVE-2026-63384, CVE-2026-63385, CVE-2026-63387, CVE-2026-63388 in Network Time Protocol NTP as described in the vulnerability details section. Vulnerability Details...

Security Bulletin: IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [CVE-2026-17262, CVE-2026-18869]

Summary IBM i is vulnerable to a denial of service and security restriction bypass due to improper validation of commands CVE-2026-17262, CVE-2026-18869 in File Transfer Protocol FTP as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17262 DESCRIPTION: IBM i...

CVE-2023-30990

CVE-2023-30990 익스플로잇 자세한 내용은 블로그 게시물을 참조하세요: https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/ Python 스크립트에는 ebcdic 모듈이 필요합니다: pip install ebcdic DRDA S38CMD 메서드 root@kitploit: python3 ddm.py "" DRDA SQL 메서드 root@kitploit: python3 ddm-bypass-test.py "" S38CMD 메서드를 이용한 간단한 바인드...

CVE-2026-19086

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker could leverage this to terminate their own process...

CVE-2026-18069

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-19280

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker could leverage this to terminate their own process...

CVE-2026-14275

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL command...

CVE-2026-14277

IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file...

CVE-2026-14276

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in PASE [CVE-2026-19086, CVE-2026-19280]

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-19086, CVE-2026-19280 in Portable Application Solutions Environment PASE as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-19086 DESCRIPTION: IBM i could allow a denial of service as a result of...

Security Bulletin: IBM i is Affected By A Race Condition Vulnerability in SQL Query Engine [CVE-2026-18069]

Summary IBM i is vulnerable to obtaining ownership of a file due to a time-of-check to time-of-use race condition CVE-2026-18069 in SQL Query Engine SQE as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18069 DESCRIPTION: IBM i could allow a local attacker to...