CVE-2026-6936

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler. An authenticated attacker could exploit this vulnerability by compiling specially crafted source code containing a specific combination of statements.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7272908	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:ibm:i:*:*:*:*:*:*:*:*

cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*

History

14 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) IBM i 7.6, 7.5, 7.4 y 7.3 es vulnerable a un ataque de denegación de servicio debido a una recursión incontrolada en el compilador de Integrated Language Environment (ILE). Un atacante autenticado podría explotar esta vulnerabilidad al compilar código fuente especialmente diseñado que contenga una combinación específica de sentencias.

Information

Published : 2026-05-27 14:17

Updated : 2026-10-14 20:10

NVD link : CVE-2026-6936

Mitre link : CVE-2026-6936

CVE.ORG link : CVE-2026-6936

JSON object : View

Products Affected

ibm

i

CWE

CWE-674

Uncontrolled Recursion

{"id": "CVE-2026-6936", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6936", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-27T15:30:02.482494Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6", "versionType": "semver", "lessThanOrEqual": "11.5.9"}, {"status": "affected", "version": "7.5", "versionType": "semver", "lessThanOrEqual": "12.1.4"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}]}]}], "published": "2026-05-27T14:17:34.923", "references": [{"url": "https://www.ibm.com/support/pages/node/7272908", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-674"}]}], "descriptions": [{"lang": "en", "value": "IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler. An authenticated attacker could exploit this vulnerability by compiling specially crafted source code containing a specific combination of statements."}, {"lang": "es", "value": "IBM i 7.6, 7.5, 7.4 y 7.3 es vulnerable a un ataque de denegaci\u00f3n de servicio debido a una recursi\u00f3n incontrolada en el compilador de Integrated Language Environment (ILE). Un atacante autenticado podr\u00eda explotar esta vulnerabilidad al compilar c\u00f3digo fuente especialmente dise\u00f1ado que contenga una combinaci\u00f3n espec\u00edfica de sentencias."}], "lastModified": "2026-10-14T20:10:00.190", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:i:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46DEA5F3-B160-471F-8C4C-0E8338EDEDA5", "versionEndIncluding": "7.6", "versionStartIncluding": "7.3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C684FC45-C9BA-4EF0-BD06-BB289450DD21"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@us.ibm.com"}