Security Bulletin: IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [CVE-2026-17470, CVE-2026-17469]

Summary IBM i is vulnerable to denial of service due to a buffer overflow and off-by-one write CVE-2026-17470, CVE-2026-17469 in Line Printer Daemon LPD as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17470 DESCRIPTION: IBM i could allow a remote attacker t...

Security Bulletin: IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH [CVE-2026-18858]

Summary IBM i is vulnerable to obtaining sensitive information from a privileged file CVE-2026-18858 in OpenSSH as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18858 DESCRIPTION: IBM i could allow a local authenticated attacker to obtain information from a...

Security Bulletin: IBM i is Affected By Denial of Service Vulnerability in Save Restore [CVE-2026-18078]

Summary IBM i is vulnerable to denial of service due to an integer overflow CVE-2026-18078 in Save Restore as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18078 DESCRIPTION: IBM i could allow a remote authenticated attacker to cause a denial of service due ...

Security Bulletin: IBM i is Affected By a Denial of Service in HTTP Server [CVE-2026-17272]

Summary IBM i is vulnerable to a denial of service from an out-of-bounds write CVE-2026-17272 in HTTP Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17272 DESCRIPTION: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of...

Security Bulletin: IBM Db2 Mirror for i is affected by multiple vulnerabilities [CVE-2026-18567, CVE-2026-16660, CVE-2026-17483]

Summary IBM Db2 Mirror for i is affected by multiple vulnerabilities as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18567 DESCRIPTION: IBM Db2 Mirror for i could allow a local attacker to obtain information due to a race condition involving a predictable...

Security Bulletin: IBM i is Affected By An Incorrect Authorization Vulnerability [CVE-2026-16941]

Summary IBM i is vulnerable to allowing a remote authenticated attacker to modify certain system messages CVE-2026-16941 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16941 DESCRIPTION: IBM i could allow a remote authenticated attacker to modify certain...

Security Bulletin: IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service [CVE-2026-16892]

Summary IBM i is vulnerable to allowing a remote authenticated attacker to bypass security restrictions CVE-2026-16892 in Network Authentication Service NAS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16892 DESCRIPTION: IBM i could allow a remote...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Debug Server

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16826, CVE-2026-17499, CVE-2026-17273, CVE-2026-17259, CVE-2026-18076, CVE-2026-17274, CVE-2026-17270, CVE-2026-18073 in Debug Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16826...

Security Bulletin: IBM i is Affected By Cryptographic Algorithm Weakness in DCM [CVE-2026-16693]

Summary IBM i is vulnerable to allowing an authenticated attacker to obtain sensitive information CVE-2026-16693 in Digital Certificate Manager DCM as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16693 DESCRIPTION: IBM i could allow a remote authenticated...

Security Bulletin: IBM i is Affected By Denial of Service Vulnerabilities in NFS [CVE-2026-17057, CVE-2026-17207]

Summary IBM i is vulnerable to denial of service due to missing authentication and a buffer overflow CVE-2026-17057, CVE-2026-17207 in Network File System NFS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17057 DESCRIPTION: IBM i could allow a remote...

CVE-2026-64607

A flaw was found in Apache HttpComponents Client, specifically in its classic input/output I/O model. When processing a response message with an invalid or unsupported Content-Encoding header, the client fails to properly release the underlying network connection. This connection leak can lead to...

Linux Distros Unpatched Vulnerability : CVE-2026-80720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iomap: add a separate bioset for iomapsplitioend iomapsplitioend can split bios that already come from iomapioendbioset and thus deadlock when the bioset is...

EUVD-2026-67950

IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert ARE for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticate...

CVE-2026-18527

IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert ARE for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticate...

CVE-2026-18527

IBM Application Runtime Expert (ARE) for i , version V1R1M0 , contains a privilege escalation flaw in the ARE GUI component processing, classified as CWE-384 (Session Fixation) . An unauthenticated remote attacker can execute actions under another user's authenticated profile, gaining elevated pr...

CVE-2026-17203 IBM Application Runtime Expert (ARE) for IBM i is vulnerable to a user gaining elevated privileges and sensitive information [, ].

IBM Administration Runtime Expert for i 1R1M0 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement...

CVE-2026-17203

IBM Application Runtime Expert (ARE) for IBM i version V1R1M0 is vulnerable to improper authentication enforcement (CWE-287), allowing a remote authenticated attacker to obtain sensitive information. The CVSS 3.1 score is 7.5 (HIGH) with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, in...

CVE-2026-80720

In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bioset for iomapsplitioend iomapsplitioend can split bios that already come from iomapioendbioset and thus deadlock when the bioset is exhausted. Add a separate bioset to avoid this deadlock. Christian Braun...

PT-2026-83326

Name of the Vulnerable Software and Affected Versions IBM Administration Runtime Expert for i version 1R1M0 Description An issue in the GUI component of the IBM Application Runtime Expert ARE for i allows an unauthenticated remote attacker to execute actions under the authenticated profile of...

CVE-2026-80548

A flaw was found in the Linux kernel's s390/vfioccw component. The iomutex was not sufficiently expanded to serialize I/O operations, which could lead to race conditions. These race conditions could result in unexpected system behavior or instability...