Skip to content
OpenAdvisories
Medium WID-SEC-2026-3907 5 CVEs

IBM i: Mehrere Schwachstellen

Published Oct 13, 2026 · Updated Oct 20, 2026 · Revision 3 · de-DE

Vendor: IBM Product: i

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM i ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen und um Daten zu manipulieren.

Product

IBM i (früher bekannt als IBM iSeries oder IBM System i) ist ein Betriebssystem, das auf IBM Power Systems Servern läuft und für Geschäftsanwendungen entwickelt wurde.

Vulnerabilities 5

  • Medium 6.5
    CVE-2026-93744

    IBM i Improper Authentication

    IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad a…

    IBM i
  • Medium 5.4
    CVE-2026-17491

    IBM i is Affected By An Improper Privilege Management Vulnerability in OpenSSH

    IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive.

    IBM i
  • Medium 5.1
    CVE-2026-107674

    IBM i is Affected by a Denial of Service in Digital Certificate Manager

    IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it…

    IBM i
  • Medium 4.3
    CVE-2026-17488

    IBM i is Affected By An Improper Authentication Vulnerability in SST / DST

    IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.

    IBM i
  • Low 3.7
    CVE-2026-17275

    IBM i is Affected by an Improper Validation Vulnerability

    IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.

    IBM i

Revision history

  1. #3

    Referenz(en) aufgenommen: EUVD-2026-106858

  2. #2

    Referenz(en) aufgenommen: EUVD-2026-103018, EUVD-2026-103138, EUVD-2026-103137, EUVD-2026-103139

  3. #1

    Initiale Fassung

References