PT-2026-71843

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

PT-2026-71850

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write...

PT-2026-71728

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper privilege management in the HTTP Server may allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer version that contains a fi...

PT-2026-71840

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability...

PT-2026-71821

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability...

PT-2026-71742

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hold, potentially...

PT-2026-71739

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A heap buffer overflow allows a remote attacker to cause a denial of service. A heap buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potential...

PT-2026-71861

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of pointers read from Java-controlled addresses...

PT-2026-71811

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

PT-2026-71835

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management...

PT-2026-71829

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can bypass security restrictions because of improper validation of anti-CSRF tokens. Cross-Site Request Forgery CSRF is a type of attack that tricks a victim into...

PT-2026-71826

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description An out-of-bounds write allows a local attacker to execute arbitrary code. An out-of-bounds write occurs when a program writes data past the end of the intended buffer, potentially overwriting adjacent...

PT-2026-71824

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A heap-based buffer overflow allows a remote authenticated attacker to execute arbitrary code. A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can...

PT-2026-71857

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow...

PT-2026-71822

IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

PT-2026-71808

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized privileges due to improper privilege management...

PT-2026-71664

Name of the Vulnerable Software and Affected Versions rsync daemon versions 2.0.0 through 3.4.9 Description A denial of service issue exists that allows unauthenticated remote attackers to exhaust daemon connection slots. This is achieved by stalling the handshake process either before or after...

PT-2026-71816

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a heap buffer overflow...

PT-2026-71865

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper processing of XML external entities...

PT-2026-71823

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A time-of-check to time-of-use TOCTOU race condition involving symbolic links allows a remote authenticated attacker to gain unauthorized access to system objects. TOCTOU is a software bug where a...