CVE-2023-30990

Exploits CVE-2023-30990 Voir notre article de blog pour les détails : https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/ Les scripts Python nécessitent le module ebcdic : pip install ebcdic Méthode DRDA S38CMD root@kitploit: python3 ddm.py "" Méthode DRDA SQL root@kitploit:...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Host Servers

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17223, CVE-2026-17206, CVE-2026-17208, CVE-2026-16929, CVE-2026-17004, CVE-2026-18846, CVE-2026-17197, CVE-2026-17217, CVE-2026-17199, CVE-2026-17229, CVE-2026-16982 in host servers, and a buffer overflow CVE-2026-17220 in host,...

CVE-2026-17216

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers...

CVE-2026-17076

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests...

CVE-2026-17216 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers...

EUVD-2026-58402

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers...

CVE-2026-17216

CVE-2026-17216 affects IBM i 7.6, 7.5, 7.4, and 7.3. A remote attacker could cause a denial of service due to an integer error when processing DRDA large-object headers. The CVSS v3.1 base score is 5.3 (Medium) with network attack vector, no user interaction required, and availability impact desc...

CVE-2026-17078

CVE-2026-17078 affects IBM i releases 7.6, 7.5, 7.4, and 7.3 (5770-SS1) due to a denial of service from resource exhaustion in DRDA / DDM. The vulnerability is remote and can be triggered without user interaction. Affected versions have published fixes via PTFs SJ10836 (7.6), SJ10837 (7.5), SJ108...

CVE-2026-17078 IBM i is Affected By A Denial of Service Vulnerability in DRDA / DDM []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to resource exhaustion...

CVE-2026-17077 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitialized variable...

CVE-2026-17077

IBM i 7.6, 7.5, 7.4, and 7.3 are affected by CVE-2026-17077 due to the use of an uninitialized variable in DRDA/DDM processing, enabling a remote attacker to cause a denial of service (CVSS v3.1 base score 5.3). The IBM security bulletin lists remediation by applying PTFs: 7.6 SJ10848, 7.5 SJ1084...

CVE-2026-17076 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests...

CVE-2026-17076

IBM i 7.3–7.6 are affected by CVE-2026-17076, a denial-of-service vulnerability from improper processing of DRDA and DDM resynchronization requests. Affects IBM i releases 7.3, 7.4, 7.5, and 7.6. Remediations are provided as PTFs: 7.3 SJ10851, 7.4 SJ10850, 7.5 SJ10849, 7.6 SJ10848. The advisory n...

EUVD-2026-58394

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests...

CVE-2026-17074 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management...

CVE-2026-17074

CVE-2026-17074 affects IBM i versions 7.6, 7.5, 7.4, and 7.3 in the DRDA/DDM (Distributed Relational Database Architecture / Distributed Data Management) component. The root cause is improper privilege management (CWE-269), allowing a remote authenticated attacker to bypass security restrictions....

PT-2026-71837

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17216, CVE-2026-17076, CVE-2026-17077, CVE-2026-17074 in Distributed Relational Database Architecture DRDA / Distributed Data Management DDM as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-172...

Security Bulletin: IBM i is Affected By A Denial of Service Vulnerability in DRDA / DDM [CVE-2026-17078]

Summary IBM i is vulnerable to a denial of service due to resource exhaustion CVE-2026-17078 in Distributed Relational Database Architecture DRDA / Distributed Data Management DDM as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17078 DESCRIPTION: IBM i coul...

Security Bulletin: IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling (CVE-2026-10109)

Summary IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling. Vulnerability Details CVEID:CVE-2026-10109 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshak...