Skip to content
OpenAdvisories
Medium WID-SEC-2026-3359 8 CVEs

IBM i: Mehrere Schwachstellen

Published Sep 14, 2026 · Updated Sep 14, 2026 · de-DE

Vendor: IBM Product: i

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM i ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, um Informationen offenzulegen und um Dateien zu manipulieren.

Product

IBM i (früher bekannt als IBM iSeries oder IBM System i) ist ein Betriebssystem, das auf IBM Power Systems Servern läuft und für Geschäftsanwendungen entwickelt wurde.

Vulnerabilities 8

  • High 7.6
    CVE-2026-69151

    Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

    Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.1, the Angular compiler i18n pipeline permits i18n-onerror and other i18n-on event-handler …

    angular angular core compiler Debian Ubuntu Wolfi npm
  • Medium 6.0
    CVE-2026-18069

    IBM i is Affected By A Race Condition Vulnerability in SQL Query Engine []

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a time-of-check to time-of-use (TOCTOU) race condition.

    IBM i
  • Medium 5.3
    CVE-2026-18065

    IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to gain access to sensitive information through session IP binding bypass in Navigator for i.

    IBM i
  • Medium 5.2
    CVE-2026-19280

    IBM i is Affected By Multiple Vulnerabilities in PASE [, ]

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker could leverage this to terminate their own process.

    IBM i
  • Medium 4.3
    CVE-2026-18251

    IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper validation of the WebSocket origin.

    IBM i
  • Medium 4.3
    CVE-2026-18515

    IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to place files into the file system with Navigator for i when they should be blocked by Navigator configuration. This could allow attackers to upload files onto the system to places the …

    IBM i
  • Medium 4.2
    CVE-2026-18151

    IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition during the WebSocket handshake process.

    IBM i
  • Low 3.3
    CVE-2026-19086

    IBM i is Affected By Multiple Vulnerabilities in PASE [, ]

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker could leverage this to terminate their own process.

    IBM i

Revision history

  1. #1

    Initiale Fassung

References