CVE-2026-16868

The CVE-2026-16868 issue affects IBM i on versions 7.3–7.6, where a denial of service can be triggered remotely by a flaw in ASN.1 length processing due to uninitialized memory in NetServer. Affected products: IBM i 7.3, 7.4, 7.5, 7.6. The IBM bulletin (NetServer vulnerabilities) lists the condit...

CVE-2026-16867

CVE-2026-16867 affects IBM i (versions 7.3–7.6) in the NetServer component. The root cause is improper authentication during NTLM session negotiation (CWE-287), allowing a remote attacker to access server resources with the privileges of an authenticated user. NVD assigns a CVSS 3.1 score of 9.8 ...

CVE-2026-16867 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...

CVE-2026-16861 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

CVE-2026-16861 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

CVE-2026-16861

IBM i 7.6, 7.5, 7.4, and 7.3 are affected by CVE-2026-16861 in NetServer, where an out-of-bounds read could allow a remote attacker to cause a denial of service. The IBM Security Bulletin lists the NetServer vulnerabilities and assigns a moderately low CVSS base score (5.3) within the broader IBM...

CVE-2026-16859

CVE-2026-16859 affects IBM i 7.3–7.6 (NetServer component) and is due to an out-of-bounds read that could allow a remote attacker to obtain sensitive information. IBM’s advisory (Security Bulletin for IBM i) lists this CVE among multiple NetServer vulnerabilities, with a base CVSS v3.1 score of 5...

CVE-2026-16853 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16853

CVE-2026-16853 is a CWE-125 out-of-bounds read in IBM i NetServer, affecting versions 7.3 through 7.6. A remote unauthenticated attacker can read sensitive memory, exposing confidentiality. IBM has issued PTFs: MJ10936 for 7.3, MJ10937 for 7.4, MJ10938 for 7.5, and MJ10939 for 7.6. No workarounds...

CVE-2026-18671: Integer Overflow or Wraparound

IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request processing. The attacker could exploit this vulnerability to cause a temporary denial of service...

PT-2026-71864

IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request processing. The attacker could exploit this vulnerability to cause a temporary denial of service...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in NetServer

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16858, CVE-2026-16867, CVE-2026-16868, CVE-2026-16853, CVE-2026-17226, CVE-2026-16859, CVE-2026-16878, CVE-2026-16861, CVE-2026-17212, CVE-2026-18020, CVE-2026-17649, CVE-2026-16871, CVE-2026-18671, CVE-2026-18680, CVE-2026-17502 in...

NetServer-RCE-Exploit

🛠️ Configuração do Laboratório Lab Setup Para reproduzir este...

NetServer-RCE-TEMP

🛠️ Configuração do Laboratório Lab Setup Para reproduzir este...

EUVD-2007-1438

Malware in sbrugna...

CVE-2025-3218

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could use the weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access...

CVE-2025-3218

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could use the weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access...

CVE-2025-3218

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could use the weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access...

CVE-2025-3218 IBM i improper certificate validation

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could use the weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access...

CVE-2025-3218 IBM i improper certificate validation

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could use the weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access...