EUVD-2026-71486

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys...

CVE-2026-16693 IBM i is Affected By Cryptographic Algorithm Weakness in DCM []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys...

CVE-2026-16693

IBM i versions 7.3, 7.4, 7.5, and 7.6 are affected by a cryptographic weakness in Digital Certificate Manager (DCM) (5770-SS1 Option 34). The vulnerability stems from hardcoded cryptographic constants used to obfuscate encryption keys, classified as CWE-327 (Use of a Broken or Risky Cryptographic...

EUVD-2026-71485

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-16826

CVE-2026-16826 affects the Debug Server component of IBM i versions 7.3, 7.4, 7.5, and 7.6. The root cause is CWE-78 (OS Command Injection) : improper neutralization of special elements used in an OS command, allowing a local attacker with low privileges to execute arbitrary commands . NVD scores...

CVE-2026-16826 IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-16826 IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-16892 IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching...

CVE-2026-16892

IBM i versions 7.3, 7.4, 7.5, and 7.6 are affected by an improper authentication flaw (CWE-287) in the Network Authentication Service (NAS) , where a remote authenticated attacker can bypass security restrictions during service-name matching . The vulnerability carries a CVSS 3.1 score of 5.4 (ME...

CVE-2026-16892 IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching...

EUVD-2026-71484

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching...

EUVD-2026-71483

IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper authorization...

CVE-2026-16941

IBM i versions 7.6, 7.5, and 7.4 (license product 5770-SS1 ) are affected by an incorrect authorization flaw (CWE-863 ) that allows a remote authenticated attacker to modify certain system messages , resulting in a limited integrity impact (CVSS 4.3, MEDIUM). No confidentiality or availability im...

CVE-2026-16941 IBM i is Affected By An Incorrect Authorization Vulnerability []

IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper authorization...

CVE-2026-17057

IBM i versions 7.3 through 7.6 are affected by a vulnerability in the Network File System (NFS) component caused by missing authentication for critical functions (CWE-306). A remote attacker can trigger a denial of service and impact data integrity without requiring privileges or user interaction...

CVE-2026-17057 IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integrity due to missing authentication for critical functions...

EUVD-2026-71482

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integrity due to missing authentication for critical functions...

CVE-2026-17207 IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow...

EUVD-2026-71481

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow...

CVE-2026-17207 IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow...