2158 matches found
Security Bulletin: IBM i is Affected by a Protection Mechanism Failure [CVE-2026-102618]
Summary IBM i is vulnerable to a user disabling system auditing due to a protection mechanism failure CVE-2026-102618 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-102618 DESCRIPTION: IBM i could allow an authenticated user to indirectly disable system...
CVE-2023-45182
CVE-2023-45182 IBM i Access Client Solutions 1.1.9.4 - Weak password encryption Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions for storing user passwords uses AES algorith...
cve-2023-30990
cve-2023-30990-rce IBM i DDM Unauthenticated RCE - Java Reverse Shell...
CVE-2023-30990
CVE-2023-30990 exploits See our blog post for details: https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/ The Python scripts require the ebcdic module: pip install ebcdic DRDA S38CMD method python3 ddm.py "" DRDA SQL method python3 ddm-bypass-test.py "" Simple bindshell with...
CVE-2023-45184
CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Local server broken access control. Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions for storing temporary password...
Security Bulletin: IBM i is Affected By Missing Authorization Vulnerability in Host-Based Printer Subsystem [CVE-2026-77153]
Summary IBM i is vulnerable to obtaining sensitive information due to no authorization check CVE-2026-77153 in Host-Based Printer Subsystem as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-77153 DESCRIPTION: IBM i could allow a remote unauthenticated attacke...
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in OpenSSL
Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-35189, CVE-2026-54872, CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782 in OpenSSL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-35189 DESCRIPTION: Issue summary: A certificate...
EUVD-2026-106858
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability ...
CVE-2026-93744
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability ...
CVE-2026-93744 IBM i Improper Authentication
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability ...
CVE-2026-93744
The IBM Navigator for i application on IBM i versions 7.3, 7.4, 7.5, and 7.6 (5770-SS1 Option 3) is vulnerable to an improper authentication flaw (CWE-287 ). An unauthenticated remote attacker can bypass security restrictions by sending a specially crafted HTTP request to any URL within the Navig...
CVE-2026-93744 IBM i Improper Authentication
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability ...
Security Bulletin: IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
Summary IBM i Access Client Solutions ACS is affected by multiple vulnerabilities CVE-2026-94002, CVE-2026-94029 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-94002 DESCRIPTION: Possible memory exhaustion in SFTP clients DefaultSftpClient in component...
PT-2026-120134
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability ...
IBM i Authorization Issues Vulnerabilities
Versions of IBM i 7.3, 7.4, 7.5, and 7.6 have authorization-related vulnerabilities. These vulnerabilities stem from improper access control. Unauthenticated remote attackers can send specially crafted HTTP requests to any URL within the Navigator application before authentication is completed...
CVE-2026-17491
IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive...
CVE-2026-17275
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers...
CVE-2026-17068
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag...