200606 matches found
CVE-2026-17482
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths...
EUVD-2026-58458
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs...
EUVD-2026-58457
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write...
EUVD-2026-58456
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory...
EUVD-2026-58455
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management...
CVE-2026-17438
IBM i 7.3â7.6 are affected by CVE-2026-17438 due to improper privilege management in LDAP, enabling a local attacker to obtain sensitive information or modify data. Vulnerable components: LDAP on IBM i with 5770-SS1; CVSS v3.1 base score 4.4 (L: local attack, low complexity, low privileges requir...
CVE-2026-17438
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management...
CVE-2026-17438 IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management...
CVE-2026-17468
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key...
EUVD-2026-58454
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key...
CVE-2026-17075
IBM i 7.3 through 7.6 is vulnerable (CWE-287: Improper Authentication) to remote attackers obtaining sensitive information and performing unauthorized operations via improper authentication token validation. Fixes are available: PTF SJ10904 for 7.3, SJ10905 for 7.4, SJ10906 for 7.5, and SJ10907 f...
CVE-2026-17075 IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information and perform unauthorized operations due to improper validation of authentication tokens...
CVE-2026-17272 IBM i is Affected By a Denial of Service in HTTP Server []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow...
CVE-2026-17272
IBM i CVE-2026-17272 affects IBM i 7.6, 7.5, 7.4 and 7.3. The vulnerability is a denial-of-service caused by an out-of-bounds write in the HTTP Server component, allowing a remote attacker to exhaust resources. Affected products use PTFs SJ10845, SJ10844, SJ10843, and SJ10842 for 7.6, 7.5, 7.4, a...
EUVD-2026-58403
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read...
CVE-2026-17226
CVE-2026-17226 affects IBM i 7.3â7.6 where a remote authenticated attacker could obtain sensitive information or cause a denial of service due to an out-of-bounds read in NetServer. The IBM bulletin lists this CVE among multiple IBM i NetServer vulnerabilities and assigns a base CVSS v3.1 score o...
CVE-2026-17216 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers...
CVE-2026-17216
CVE-2026-17216 affects IBM i 7.6, 7.5, 7.4, and 7.3. A remote attacker could cause a denial of service due to an integer error when processing DRDA large-object headers. The CVSS v3.1 base score is 5.3 (Medium) with network attack vector, no user interaction required, and availability impact desc...