CVE-2026-16898

CVE-2026-16898 affects IBM i 7.3–7.6 and can allow a local authenticated attacker to change ownership of arbitrary files due to improper validation of attacker-controlled file paths (CWE-73). The issue is documented in IBM’s Security Bulletin for Network Authentication Service, which confirms the...

CVE-2026-16898

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...

EUVD-2026-58379

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...

CVE-2026-16896 IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...

CVE-2026-16896

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...

CVE-2026-16887

IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

CVE-2026-16887

IBM i 7.6 is affected by CVE-2026-16887, a remote-denial-of-service due to an out-of-bounds write in Dedicated System Tools (DST) / System Service Tools (SST). The vulnerability enables a remote attacker with network access (no user interaction) to trigger a high-severity outage (CVSS v3.1 base s...

EUVD-2026-58377

IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

CVE-2026-16878

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16878 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16878

CVE-2026-16878 affects IBM i 7.3–7.6 in NetServer. A remote authenticated attacker could obtain sensitive information due to an out-of-bounds read in the affected component. The IBM bulletin lists specific remediation: apply the corresponding PTFs to each release (7.3: MJ10936, 7.4: MJ10937, 7.5:...

CVE-2026-16871

CVE-2026-16871 affects IBM i 7.3, 7.4, 7.5, and 7.6. The issue is a heap buffer overflow in NetServer that could allow a remote authenticated attacker to obtain sensitive information. Affected releases are IBM i 7.3–7.6; impact per the entry is limited to confidentiality (C: Low, I:N, A:N) with a...

EUVD-2026-58374

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...

CVE-2026-16868

The CVE-2026-16868 issue affects IBM i on versions 7.3–7.6, where a denial of service can be triggered remotely by a flaw in ASN.1 length processing due to uninitialized memory in NetServer. Affected products: IBM i 7.3, 7.4, 7.5, 7.6. The IBM bulletin (NetServer vulnerabilities) lists the condit...

EUVD-2026-58372

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

CVE-2026-16861

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

EUVD-2026-58371

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16859 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16859

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

EUVD-2026-58370

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carri...