CVE-2026-17209

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting...

CVE-2026-17079 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter...

CVE-2026-17079

CVE-2026-17079 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. The issue allows a remote authenticated attacker to bypass security restrictions by disabling server-side input validation through a request parameter. The root cause is improper input validation control that can be manipulat...

CVE-2026-16915

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

EUVD-2026-58795

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation...

CVE-2026-16879

CVE-2026-16879 affects IBM Db2 Mirror for i 7.4, 7.5, and 7.6. A remote authenticated attacker could bypass security restrictions due to improper authorization from user-supplied input. Impact is high (C/H/I/H) per IBM’s assessment, enabling unauthorized access despite authentication. Root cause:...

CVE-2026-16879

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input...

PT-2026-72105

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Remote authenticated attackers can bypass security restrictions due to improper neutralization of special elements used in an SQL command, which may lead to SQL injection. SQL injection...

CVE-2026-17071

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...

CVE-2026-17088

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability...

EUVD-2026-58474

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper processing of XML external entities...

CVE-2026-17088

IBM i versions 7.3–7.6 are affected by CVE-2026-17088 in Digital Certificate Manager. A path traversal vulnerability could allow a remote authenticated attacker to obtain sensitive information. CVSS 3.1 base score 4.3 (N: network, L: low confidentiality impact, PR: Low). Remediation is via IBM i ...

CVE-2026-17074 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management...

CVE-2026-17071

CVE-2026-17071 affects IBM i 7.3–7.6. A remote authenticated attacker can perform file manipulation due to a path traversal flaw in Digital Certificate Manager. The vulnerability is rooted in improper path handling, enabling manipulation of files when authenticated over the network. Affected IBM ...

CVE-2026-17071 IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...

EUVD-2026-58392

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...

CVE-2026-17043

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to delete arbitrary files due to path traversal...

CVE-2026-16929

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a buffer overflow...

CVE-2026-16878

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-17069

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of anti-CSRF tokens...