9007 matches found
CVE-2026-16906 IBM i is Affected By Multiple Vulnerabilities in Domain Name System
IBM i 7.6, and 7.5 could allow a remote authenticated attacker to execute arbitrary commands with elevated privileges due to improper neutralization of special elements used in an OS command...
EUVD-2026-57377
IBM i 7.6, and 7.5 could allow a local attacker to gain elevated privileges due to improper neutralization of special elements used in an OS command...
CVE-2026-16856 IBM i is Affected By Multiple Vulnerabilities in Domain Name System
IBM i 7.6, and 7.5 could allow a local attacker to gain elevated privileges due to improper neutralization of special elements used in an OS command...
CVE-2026-16856
IBM i 7.5 and 7.6 are affected by CVE-2026-16856 (OS Command Injection) due to improper neutralization of special elements in an OS command, enabling a local attacker to gain elevated privileges. The IBM Security Bulletin also notes CVE-2026-16906 in the same DNS/BIND subsystem with identical imp...
CVE-2026-16931
CVE-2026-16931 affects IBM i releases 7.6, 7.5, 7.4 and 7.3. A remote attacker could cause a denial of service through improper handling of zero-length TCP options. The vulnerability has a CVSS v3.1 base score of 7.5 (NETWORK, HIGH impact on availability; no impact on confidentiality/integrity). ...
EUVD-2026-57376
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper handling of zero-length TCP options...
CVE-2026-16931 IBM i is Affected By A Denial of Service Vulnerability []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper handling of zero-length TCP options...
CVE-2026-17110
IBM i 7.6, 7.5, 7.4, and 7.3 are affected by CVE-2026-17110, allowing a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management. Affected IBM i release levels are 7.6/7.5/7.4/7.3 with 5770-SS1; remediation via PTFs SJ10867/...
EUVD-2026-57375
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management...
CVE-2026-17110 IBM i is Affected By Multiple Vulnerabilities in SQL
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management...
EUVD-2026-57374
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection...
CVE-2026-17109 IBM i is Affected By Multiple Vulnerabilities in SQL
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection...
CVE-2026-17109
IBM i versions 7.3–7.6 are affected by CVE-2026-17109. A remote authenticated attacker could inject unexpected parameters into a command due to parameter handling/injection in SQL-related processing. Affected: IBM i 7.3, 7.4, 7.5, 7.6 (5770-SS1). Impact per CVSSv3.1: 4.3 (Availability impact: Low...
EUVD-2026-57373
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements in an SQL parameter...
CVE-2026-17420
CVE-2026-17420 affects IBM i 7.6, 7.5, 7.4 and 7.3. The issue stems from improper neutralization of special elements in an SQL parameter, enabling a remote authenticated attacker to bypass security restrictions. Exploitation details are not provided beyond this description in the bulletin. Remedi...
CVE-2026-17420 IBM i is Affected By Multiple Vulnerabilities in SQL
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements in an SQL parameter...
CVE-2026-17222
IBM i CVE-2026-17222 affects IBM i 7.6, 7.5, 7.4, and 7.3 (5770-SS1) where an authenticated remote attacker could modify data in certain SQL tables due to improper neutralization of special elements in an SQL command. The IBM security bulletin lists related SQL vulnerabilities and provides fixes ...
CVE-2026-17222 IBM i is Affected By Multiple Vulnerabilities in SQL
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables due to improper neutralization of special elements used in an SQL command...