Security Bulletin: IBM Rational Developer for i is affected by Multiple vulnerabilities

Summary IBM Rational Developer for i is affected by an HTTP request smuggling vulnerability in Jetty-http CVE-2026-19203, two authentication bypass vulnerabilities in sshd-osgi CVE-2026-77185, CVE-2026-93994, two memory exhaustion vulnerabilities in sshd-sftp CVE-2026-94002, CVE-2026-94029, an...

Security Bulletin: IBM i is Affected by an Improper Authentication Vulnerability in IBM Navigator for i [CVE-2026-93744].

Summary IBM i is vulnerable to a security bypass due to improper access control in IBM Navigator for i CVE-2026-93744 as described in the vulnerability details section. Vulnerability Details ID: CVE-2026-93744 DESCRIPTION: IBM Navigator for i could allow an unathenticated remote attacker to bypas...

CVE-2026-96012

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated...

CVE-2026-96012 IBM Db2 Mirror for i Privilege Escalation

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated...

CVE-2026-96012 IBM Db2 Mirror for i Privilege Escalation

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated...

CVE-2026-96012

The IBM Db2 Mirror for i GUI (versions 7.4, 7.5, and 7.6 ) is vulnerable to a critical privilege escalation issue (CWE-264 ). An authenticated attacker can craft a malicious request that bypasses input validation and authorization checks to execute arbitrary code, potentially gaining elevated sys...

EUVD-2026-97815

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated...

PT-2026-110907

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description An authenticated attacker can achieve privilege escalation by crafting a malicious request. This action bypasses input validation and additional authorization checks, allowing the...

CVE-2026-96012: Undefined Security Weakness

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated...

Security Bulletin: IBM Db2 Mirror for i is vulnerable to privilege escalation [CVE-2026-96012]

Summary IBM Db2 Mirror for i GUI is vulnerable to privilege escalation CVE-2026-96012 as described in the vulnerability details section. Vulnerability Details ID: CVE-2026-96012 DESCRIPTION: IBM Db2 Mirror for i GUI is vulnerable to privilege escalation. An authenticated attacker could craft a...

Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i

Summary IBM Rational Developer for i is affected by cross-site scripting vulnerabilities in DOMPurify CVE-2026-65898, CVE-2026-65900, CVE-2026-65901, CVE-2026-49458, CVE-2026-49459, CVE-2026-49978, CVE-2026-66010, and CVE-2026-75838, a protection mechanism failure vulnerability in DOMPurify...

Security Bulletin: IBM i is Affected By a Cross-Site Scripting Vulnerability in Navigator for i [CVE-2026-75838]

Summary IBM Navigator for i uses DOMPurify for HTML sanitization. DOMPurify is vulnerable to cross-site scripting due to failure to neutralize detached subtrees in element-removal hooks CVE-2026-75838 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-75838...

Security Bulletin: IBM Db2 Mirror for i is vulnerable to obtain sensitive information [CVE-2026-18104]

Summary IBM Db2 Mirror for i is vulnerable to obtaining sensitive information CVE-2026-18104 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18104 DESCRIPTION: IBM i could allow a local attacker to obtain sensitive information due to the use of the AES...

CVE-2026-18104

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...

CVE-2026-18104 IBM Db2 Mirror for i is vulnerable to obtain sensitive information []

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...

CVE-2026-18104 IBM Db2 Mirror for i is vulnerable to obtain sensitive information []

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...

EUVD-2026-85892

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...

CVE-2026-18104

IBM Db2 Mirror for i versions 7.6, 7.5, and 7.4 are vulnerable to the disclosure of sensitive information. The root cause is the use of the AES Electronic Codebook (ECB) mode for encryption, which is considered a broken or risky cryptographic algorithm (CWE-327 ). This issue allows a local attack...

CVE-2026-18104: Use of a Broken or Risky Cryptographic Algorithm

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...

PT-2026-97811

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A local attacker could obtain sensitive information because the software uses AES Electronic Codebook ECB mode for encryption. ECB is a block cipher mode that encrypts identical blocks ...