Total
276 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-18713 | 1 Ibm | 1 I | 2026-10-23 | N/A | 8.8 HIGH |
| IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands. | |||||
| CVE-2026-17222 | 1 Ibm | 1 I | 2026-10-23 | N/A | 4.3 MEDIUM |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables due to improper neutralization of special elements used in an SQL command. | |||||
| CVE-2026-17276 | 1 Ibm | 1 I | 2026-10-23 | N/A | 9.6 CRITICAL |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privileges due to improper authorization in the handling of high-authority threads. | |||||
| CVE-2026-17419 | 1 Ibm | 1 I | 2026-10-23 | N/A | 6.5 MEDIUM |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command. | |||||
| CVE-2026-16906 | 1 Ibm | 1 I | 2026-10-23 | N/A | 8.8 HIGH |
| IBM i 7.6, and 7.5 could allow a remote authenticated attacker to execute arbitrary commands with elevated privileges due to improper neutralization of special elements used in an OS command. | |||||
| CVE-2026-17110 | 1 Ibm | 1 I | 2026-10-23 | N/A | 8.8 HIGH |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management. | |||||
| CVE-2026-17445 | 1 Ibm | 1 I | 2026-10-23 | N/A | 8.2 HIGH |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of an attacker-supplied user profile name. | |||||
| CVE-2026-18150 | 1 Ibm | 1 I | 2026-10-23 | N/A | 4.3 MEDIUM |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition. | |||||
| CVE-2026-18235 | 1 Ibm | 1 I | 2026-10-23 | N/A | 8.3 HIGH |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation. | |||||
| CVE-2026-18148 | 1 Ibm | 1 I | 2026-10-23 | N/A | 4.3 MEDIUM |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to inject arbitrary content into Navigator log files due to improper output neutralization for logs. | |||||
| CVE-2026-17082 | 1 Ibm | 1 I | 2026-10-23 | N/A | 8.8 HIGH |
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of a client-supplied profile name. | |||||
| CVE-2026-17111 | 1 Ibm | 1 I | 2026-10-23 | N/A | 7.6 HIGH |
| IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database. | |||||
| CVE-2026-102917 | 1 Ibm | 1 I | 2026-10-23 | N/A | 7.8 HIGH |
| IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system. | |||||
| CVE-2026-107674 | 1 Ibm | 1 I | 2026-10-23 | N/A | 5.1 MEDIUM |
| IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections. | |||||
| CVE-2026-17068 | 1 Ibm | 1 I | 2026-10-23 | N/A | 5.4 MEDIUM |
| IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag. | |||||
| CVE-2026-17073 | 1 Ibm | 1 I | 2026-10-23 | N/A | 5.4 MEDIUM |
| IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution. | |||||
| CVE-2026-17275 | 1 Ibm | 1 I | 2026-10-23 | N/A | 3.7 LOW |
| IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers. | |||||
| CVE-2026-17488 | 1 Ibm | 1 I | 2026-10-23 | N/A | 4.3 MEDIUM |
| IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication. | |||||
| CVE-2026-17491 | 1 Ibm | 1 I | 2026-10-23 | N/A | 5.4 MEDIUM |
| IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive. | |||||
| CVE-2025-36367 | 1 Ibm | 1 I | 2026-10-18 | N/A | 8.8 HIGH |
| IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authorization check. A malicious actor can use the elevated privileges of another user profile to gain root access to the host operating system. | |||||