CVE-2026-17109 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection...

CVE-2026-17109

IBM i versions 7.3–7.6 are affected by CVE-2026-17109. A remote authenticated attacker could inject unexpected parameters into a command due to parameter handling/injection in SQL-related processing. Affected: IBM i 7.3, 7.4, 7.5, 7.6 (5770-SS1). Impact per CVSSv3.1: 4.3 (Availability impact: Low...

EUVD-2026-57373

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements in an SQL parameter...

CVE-2026-17420 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements in an SQL parameter...

CVE-2026-17222 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables due to improper neutralization of special elements used in an SQL command...

CVE-2026-17222

IBM i CVE-2026-17222 affects IBM i 7.6, 7.5, 7.4, and 7.3 (5770-SS1) where an authenticated remote attacker could modify data in certain SQL tables due to improper neutralization of special elements in an SQL command. The IBM security bulletin lists related SQL vulnerabilities and provides fixes ...

EUVD-2026-57372

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables due to improper neutralization of special elements used in an SQL command...

EUVD-2026-57366

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

CVE-2026-17419 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

CVE-2026-17419

IBM i (7.3–7.6) with 5770-SS1 is affected by CVE-2026-17419 due to improper neutralization of special elements in SQL commands, enabling a remote authenticated attacker to modify SQL tables. Affected versions include 7.3, 7.4, 7.5, and 7.6. CVSS 3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H...

CVE-2026-17266

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-17266 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

EUVD-2026-57364

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-18235

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...

EUVD-2026-57363

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...

CVE-2026-18235

IBM i is affected by CVE-2026-18235 in Navigator for i. Description: remote authenticated attacker could execute arbitrary Control Language commands due to insufficient input validation. Affected products/versions: IBM i 7.3, 7.4, 7.5, 7.6. CVSS v3.1 base score 8.3 (HIGH) with network attack vect...

CVE-2026-17268

IBM i (versions 7.6, 7.5, 7.4, 7.3) is affected by CVE-2026-17268 in Navigator for i, which could allow a remote authenticated attacker to bypass security restrictions due to improper validation of a session token. The issue is documented in IBM’s Security Bulletin and tied to a CVSS v3.1 base sc...

EUVD-2026-57362

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of a session token...

CVE-2026-17268

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of a session token...

CVE-2026-17268 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of a session token...