CVE-2023-45184

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Local server broken access control. Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions for storing temporary password...

EUVD-2026-98177

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input...

EUVD-2026-98176

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application...

EUVD-2026-98168

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control...

EUVD-2026-98179

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...

EUVD-2026-98178

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server...

EUVD-2026-98167

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process...

EUVD-2026-98180

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication...

CVE-2026-17487

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process...

CVE-2026-18343

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...

CVE-2026-17484 IBM i is Information Disclosure

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control...

CVE-2026-17484

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to a denial of service (DoS) condition caused by improper access control within Dedicated Service Tools (DST) or System Service Tools (SST). A local attacker could exploit this flaw to disrupt service availability. Remediation involves installi...

CVE-2026-17487

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to an information disclosure flaw (CVE-2026-17487 ) within the Dedicated Service Tools (DST) / System Service Tools (SST) . A remote attacker can enumerate user profiles because the system returns distinct error codes during the sign-on process...

CVE-2026-18318

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to an information disclosure issue in Dedicated Service Tools (DST) / System Service Tools (SST) . Due to improper authentication (CWE-307), a remote attacker could perform brute-force attacks to obtain credentials. The vulnerability has a CVSS...

CVE-2026-18343 IBM i is Affected By An Improper Privilege Management Vulnerability

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...

CVE-2026-18343

IBM i versions 7.3, 7.4, 7.5, and 7.6 (all 5770-SS1) are vulnerable to an Improper Privilege Management vulnerability (CWE-269 ). This flaw allows a local attacker to modify the BOOTP table due to insufficient authorization. The vulnerability carries a CVSS v3.1 base score of 4.4. Remediation is ...

CVE-2026-81858 IBM i is Affected By A Denial of Service Vulnerability in Host Servers

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server...

CVE-2026-81858

IBM i versions 7.3, 7.4, 7.5, and 7.6 (5770-SS1) are vulnerable to an out-of-bounds read in the File Server component. This vulnerability could allow a remote authenticated attacker to cause a denial of service and obtain information. Remediation is available via specific PTFs: SJ11622 for versio...

CVE-2026-93886

IBM i versions 7.3, 7.4, 7.5, and 7.6 (Product 5770-SS1) are vulnerable to an Improper Neutralization of Input During Web Page Generation (CWE-79) in the HTTP Server Administration Graphical User Interface (GUI) . A remote authenticated attacker could exploit this flaw due to improper validation ...

CVE-2026-96119

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to an Improper Control of Code Generation (CWE-94) vulnerability within the HTTP Server Administration web application . Due to improper data sanitization , a remote authenticated attacker could potentially obtain sensitive information or execu...