IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7292159 | Patch Vendor Advisory |
Configurations
History
14 Oct 2026, 23:48
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ibm i
Ibm |
|
| References | () https://www.ibm.com/support/pages/node/7292159 - Patch, Vendor Advisory | |
| CPE | cpe:2.3:o:ibm:i:*:*:*:*:*:*:*:* |
13 Oct 2026, 00:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-13 00:17
Updated : 2026-10-14 23:48
NVD link : CVE-2026-96119
Mitre link : CVE-2026-96119
CVE.ORG link : CVE-2026-96119
JSON object : View
Products Affected
ibm
- i
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')