92716 matches found
CVE-2026-16961
IBM i versions 7.4, 7.5, and 7.6 (feature 5770-SS1) are vulnerable to CWE-89 SQL injection in Db2 Mirror, allowing remote attackers to view, add, modify, or delete back-end database data. IBM has issued PTFs SJ10902 (7.6), SJ10908 (7.5), and SJ10910 (7.4) as remediation; no workarounds are provid...
CVE-2026-16961 IBM i is Affected By SQL Injection Vulnerability in Db2 Mirror []
IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...
CVE-2026-16908
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability...
EUVD-2026-58380
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability...
CVE-2026-16908
CVE-2026-16908 affects IBM i releases 7.3, 7.4, 7.5, and 7.6. A path traversal vulnerability could let a remote authenticated attacker gain unauthorized access to arbitrary objects. The CVSS v3.1 base score is 8.5 (HIGH), with network access, high attack complexity, and privileges required at LOW...
CVE-2026-16887 IBM i is Affected By A Denial of Service Vulnerability DST/SST []
IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...
CVE-2026-16887
IBM i 7.6 is affected by CVE-2026-16887, a remote-denial-of-service due to an out-of-bounds write in Dedicated System Tools (DST) / System Service Tools (SST). The vulnerability enables a remote attacker with network access (no user interaction) to trigger a high-severity outage (CVSS v3.1 base s...
CVE-2026-16887
IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...
EUVD-2026-58377
IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...
CVE-2026-16878
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...
CVE-2026-16878
CVE-2026-16878 affects IBM i 7.3–7.6 in NetServer. A remote authenticated attacker could obtain sensitive information due to an out-of-bounds read in the affected component. The IBM bulletin lists specific remediation: apply the corresponding PTFs to each release (7.3: MJ10936, 7.4: MJ10937, 7.5:...
CVE-2026-16878 IBM i is Affected By Multiple Vulnerabilities in NetServer
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...
CVE-2026-16871
CVE-2026-16871 affects IBM i 7.3, 7.4, 7.5, and 7.6. The issue is a heap buffer overflow in NetServer that could allow a remote authenticated attacker to obtain sensitive information. Affected releases are IBM i 7.3–7.6; impact per the entry is limited to confidentiality (C: Low, I:N, A:N) with a...
EUVD-2026-58374
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...
CVE-2026-16868 IBM i is Affected By Multiple Vulnerabilities in NetServer
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...
CVE-2026-16868
The CVE-2026-16868 issue affects IBM i on versions 7.3–7.6, where a denial of service can be triggered remotely by a flaw in ASN.1 length processing due to uninitialized memory in NetServer. Affected products: IBM i 7.3, 7.4, 7.5, 7.6. The IBM bulletin (NetServer vulnerabilities) lists the condit...
EUVD-2026-58372
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
CVE-2026-16861
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...