9001 matches found
EUVD-2026-58380
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability...
CVE-2026-16908
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability...
CVE-2026-16908 IBM i is Affected By Multiple SQL Vulnerabilities [, ]
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability...
CVE-2026-16908
CVE-2026-16908 affects IBM i releases 7.3, 7.4, 7.5, and 7.6. A path traversal vulnerability could let a remote authenticated attacker gain unauthorized access to arbitrary objects. The CVSS v3.1 base score is 8.5 (HIGH), with network access, high attack complexity, and privileges required at LOW...
CVE-2026-16898
CVE-2026-16898 affects IBM i 7.3–7.6 and can allow a local authenticated attacker to change ownership of arbitrary files due to improper validation of attacker-controlled file paths (CWE-73). The issue is documented in IBM’s Security Bulletin for Network Authentication Service, which confirms the...
EUVD-2026-58379
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...
CVE-2026-16898 IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...
CVE-2026-16898
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...
EUVD-2026-58378
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...
CVE-2026-16896
IBM i versions 7.3–7.6 are affected by CVE-2026-16896 (TOCTOU race condition in Network Authentication Service). Local authenticated attackers could obtain unauthorized access to files due to a TOCTOU flaw. Affected products: IBM i 7.3, 7.4, 7.5, 7.6. Remediation: apply the fixed PTFs per version...
CVE-2026-16896 IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...
CVE-2026-16896
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...
CVE-2026-16887 IBM i is Affected By A Denial of Service Vulnerability DST/SST []
IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...
CVE-2026-16887
IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...
CVE-2026-16887
IBM i 7.6 is affected by CVE-2026-16887, a remote-denial-of-service due to an out-of-bounds write in Dedicated System Tools (DST) / System Service Tools (SST). The vulnerability enables a remote attacker with network access (no user interaction) to trigger a high-severity outage (CVSS v3.1 base s...
EUVD-2026-58377
IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...
CVE-2026-16878
CVE-2026-16878 affects IBM i 7.3–7.6 in NetServer. A remote authenticated attacker could obtain sensitive information due to an out-of-bounds read in the affected component. The IBM bulletin lists specific remediation: apply the corresponding PTFs to each release (7.3: MJ10936, 7.4: MJ10937, 7.5:...
CVE-2026-16878 IBM i is Affected By Multiple Vulnerabilities in NetServer
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...