CVE-2026-17481 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs...

CVE-2026-17476

IBM i 7.3–7.6 are affected by CVE-2026-17476, a remote-denial-of-service flaw caused by an improper buffer write. The vulnerability affects IBM i releases 7.3, 7.4, 7.5, and 7.6 and can be triggered remotely without user interaction. IBM’s bulletin lists multiple CVEs (including CVE-2026-17476) i...

EUVD-2026-58457

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write...

CVE-2026-17476 IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write...

EUVD-2026-58456

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-17473

IBM Documentation Offline 1.0.0–1.4.1 is affected by CVE-2026-17473: information disclosure via path traversal caused by improper limitation of a pathname to a restricted directory. A remote attacker could read arbitrary files. CVSS v3.1 base score 7.5 (HIGH). Remediation: upgrade to 1.5.1.

CVE-2026-17473 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-17438

IBM i 7.3–7.6 are affected by CVE-2026-17438 due to improper privilege management in LDAP, enabling a local attacker to obtain sensitive information or modify data. Vulnerable components: LDAP on IBM i with 5770-SS1; CVSS v3.1 base score 4.4 (L: local attack, low complexity, low privileges requir...

EUVD-2026-58455

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management...

CVE-2026-17438

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management...

CVE-2026-17438 IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management...

CVE-2026-17468 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key...

CVE-2026-17468

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key...

CVE-2026-17468 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key...

EUVD-2026-58454

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key...

CVE-2026-17468

CVE-2026-17468 affects IBM Documentation Offline (versions 1.0.0–1.4.1). The embedded server uses a hardcoded session secret, enabling a remote attacker to forge valid session tokens and manipulate client-side state (session forgery). This is part of multiple vulnerabilities in the IBM Documentat...

EUVD-2026-58453

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information and perform unauthorized operations due to improper validation of authentication tokens...

CVE-2026-17075

IBM i 7.3 through 7.6 is vulnerable (CWE-287: Improper Authentication) to remote attackers obtaining sensitive information and performing unauthorized operations via improper authentication token validation. Fixes are available: PTF SJ10904 for 7.3, SJ10905 for 7.4, SJ10906 for 7.5, and SJ10907 f...

CVE-2026-17075 IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information and perform unauthorized operations due to improper validation of authentication tokens...

CVE-2026-17272

IBM i CVE-2026-17272 affects IBM i 7.6, 7.5, 7.4 and 7.3. The vulnerability is a denial-of-service caused by an out-of-bounds write in the HTTP Server component, allowing a remote attacker to exhaust resources. Affected products use PTFs SJ10845, SJ10844, SJ10843, and SJ10842 for 7.6, 7.5, 7.4, a...