Skip to content
OpenAdvisories
Medium WID-SEC-2026-3130 13 CVEs

IBM i: Mehrere Schwachstellen

Published Aug 31, 2026 · Updated Sep 6, 2026 · Revision 2 · de-DE

Vendor: IBM Product: i

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM i ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder Denial-of-Service-Zustände herbeizuführen.

Product

IBM i (früher bekannt als IBM iSeries oder IBM System i) ist ein Betriebssystem, das auf IBM Power Systems Servern läuft und für Geschäftsanwendungen entwickelt wurde.

Vulnerabilities 13

  • Medium 6.5
    CVE-2026-17057

    IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integrity due to missing authentication for critical functions.

    IBM i
  • Medium 6.5
    CVE-2026-17207

    IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow.

    IBM i
  • Medium 6.5
    CVE-2026-17273

    IBM i is Affected By Multiple Vulnerabilities in Debug Server

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a NULL pointer dereference.

    IBM i
  • Medium 5.4
    CVE-2026-16892

    IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service []

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching.

    IBM i
  • Medium 5.4
    CVE-2026-17274

    IBM i is Affected By Multiple Vulnerabilities in Debug Server

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds.

    IBM i
  • Medium 5.3
    CVE-2026-16826

    IBM i is Affected By Multiple Vulnerabilities in Debug Server

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

    IBM i
  • Medium 4.4
    CVE-2026-16693

    IBM i is Affected By Cryptographic Algorithm Weakness in DCM []

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys.

    IBM i
  • Medium 4.4
    CVE-2026-17499

    IBM i is Affected By Multiple Vulnerabilities in Debug Server

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

    IBM i
  • Medium 4.4
    CVE-2026-18073

    IBM i is Affected By Multiple Vulnerabilities in Debug Server

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to inject parameters into a CL command due to improper neutralization of special elements.

    IBM i
  • Medium 4.3
    CVE-2026-16941

    IBM i is Affected By An Incorrect Authorization Vulnerability []

    IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper authorization.

    IBM i
  • Medium 4.3
    CVE-2026-17259

    IBM i is Affected By Multiple Vulnerabilities in Debug Server

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow.

    IBM i
  • Medium 4.3
    CVE-2026-17270

    IBM i is Affected By Multiple Vulnerabilities in Debug Server

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow.

    IBM i
  • Medium 4.3
    CVE-2026-18076

    IBM i is Affected By Multiple Vulnerabilities in Debug Server

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a memory leak.

    IBM i

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-71461, EUVD-2026-71486, EUVD-2026-71485, EUVD-2026-71484, EUVD-2026-71483, EUVD-2026-71482, EUVD-2026-71479, EUVD-2026-71478, EUVD-2026-71477, EUVD-2026-71476, EUVD-2026-71459, EUVD-2026-71481, EUVD-2026-71467

  2. #1

    Initiale Fassung

References