CVE-2026-16887

IBM i 7.6 is affected by CVE-2026-16887, a remote-denial-of-service due to an out-of-bounds write in Dedicated System Tools (DST) / System Service Tools (SST). The vulnerability enables a remote attacker with network access (no user interaction) to trigger a high-severity outage (CVSS v3.1 base s...

EUVD-2026-58377

IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

CVE-2026-16878 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16878

CVE-2026-16878 affects IBM i 7.3–7.6 in NetServer. A remote authenticated attacker could obtain sensitive information due to an out-of-bounds read in the affected component. The IBM bulletin lists specific remediation: apply the corresponding PTFs to each release (7.3: MJ10936, 7.4: MJ10937, 7.5:...

CVE-2026-16878

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16871

CVE-2026-16871 affects IBM i 7.3, 7.4, 7.5, and 7.6. The issue is a heap buffer overflow in NetServer that could allow a remote authenticated attacker to obtain sensitive information. Affected releases are IBM i 7.3–7.6; impact per the entry is limited to confidentiality (C: Low, I:N, A:N) with a...

EUVD-2026-58374

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...

CVE-2026-16868

The CVE-2026-16868 issue affects IBM i on versions 7.3–7.6, where a denial of service can be triggered remotely by a flaw in ASN.1 length processing due to uninitialized memory in NetServer. Affected products: IBM i 7.3, 7.4, 7.5, 7.6. The IBM bulletin (NetServer vulnerabilities) lists the condit...

EUVD-2026-58372

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

CVE-2026-16861

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

CVE-2026-16861 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

EUVD-2026-58371

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16859 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16859

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

EUVD-2026-58370

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carri...

CVE-2026-19747

The CVE-2026-19747 entry identifies a vulnerability in Tenda devices (CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C, TC3T15C) affecting the ATE Module’s Kylin component, specifically the CAte::HandleCmd function. This manipulation enables remote command injection, implying a netwo...

CVE-2026-19747 Tenda CH7 ATE Module Kylin HandleCmd command injection

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carri...

CVE-2026-19747

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carri...

CVE-2026-16853 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16853

CVE-2026-16853 is a CWE-125 out-of-bounds read in IBM i NetServer, affecting versions 7.3 through 7.6. A remote unauthenticated attacker can read sensitive memory, exposing confidentiality. IBM has issued PTFs: MJ10936 for 7.3, MJ10937 for 7.4, MJ10938 for 7.5, and MJ10939 for 7.6. No workarounds...