CVE-2026-17207 IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow...

CVE-2026-17207

CVE-2026-17207 is a buffer overflow (CWE-787: Out-of-bounds Write) in the Network File System (NFS) component of IBM i versions 7.3, 7.4, 7.5, and 7.6. A remote, unauthenticated attacker can trigger it over the network to cause a denial of service and compromise data integrity . NVD rates it CVSS...

CVE-2026-17255

IBM i versions 7.6, 7.5, 7.4, and 7.3 are affected by a denial of service vulnerability caused by improper validation of the prefix length in ICMPv6 Router Advertisements , classified as CWE-787 (Out-of-bounds Write) . A remote attacker can trigger a DoS with low complexity and no privileges requ...

EUVD-2026-71480

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements...

EUVD-2026-71479

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow...

CVE-2026-17259 IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow...

CVE-2026-17259

CVE-2026-17259 affects the Debug Server component of IBM i versions 7.3 through 7.6. A remote authenticated attacker can trigger a stack-based buffer overflow (CWE-121), resulting in a denial of service with low availability impact and no impact on confidentiality or integrity. The attack vector ...

CVE-2026-17270

CVE-2026-17270 is one of eight vulnerabilities in the IBM i Debug Server component affecting versions 7.3, 7.4, 7.5, and 7.6 . The root cause is a stack-based buffer overflow (CWE-121) that allows a local attacker to cause a denial of service . The assigned CVSS v3.1 score is 4.3 (Medium) with a ...

EUVD-2026-71478

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow...

CVE-2026-17273

CVE-2026-17273 affects the Debug Server component in IBM i versions 7.3, 7.4, 7.5, and 7.6. A remote authenticated attacker with low privileges can trigger a NULL pointer dereference (CWE-476), resulting in a denial of service with no impact on confidentiality or integrity. The IBM-assigned CVSS ...

EUVD-2026-71477

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a NULL pointer dereference...

EUVD-2026-71476

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds...

CVE-2026-17274

CVE-2026-17274 affects the Debug Server component of IBM i versions 7.6, 7.5, 7.4, and 7.3. The vulnerability stems from predictable server seeds (CWE-330: Use of Insufficiently Random Values), allowing a remote authenticated attacker to bypass security restrictions with low complexity over the n...

CVE-2026-17274 IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds...

CVE-2026-17440

IBM App Connect Enterprise (13.0.1.0 through 13.0.8.1 and 12.0.1.0 through 12.0.12.28) and IBM Integration Bus for z/OS (10.1.0.0 through 10.1.0.7) are vulnerable to a denial of service via uncontrolled recursion in Adapter nodes . A local attacker with low privileges can trigger the condition, r...

EUVD-2026-71475

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontrolled recursion...

EUVD-2026-71473

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext...

CVE-2026-17443

CVE-2026-17443 affects IBM App Connect Enterprise (13.0.1.0–13.0.8.1 and 12.0.1.0–12.0.12.28) and IBM Integration Bus for z/OS (10.1.0.0–10.1.0.7). The vulnerability is an XML External Entity (XXE) injection in Adapter nodes , allowing a remote authenticated attacker to obtain sensitive informati...

EUVD-2026-71471

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection...

CVE-2026-17444

IBM App Connect Enterprise (13.0.1.0–13.0.8.1, 12.0.1.0–12.0.12.28) and IBM Integration Bus for z/OS (10.1.0.0–10.1.0.7) are affected by an XML external entity (XXE) injection in Adapter nodes , allowing a remote authenticated attacker with low privileges to obtain sensitive information. The vuln...