I

IBM i versions 7.3 through 7.6 are susceptible to a buffer overflow vulnerability allowing unauthenticated remote attackers to trigger a denial-of-service condition via malformed requests.

An untrusted search path vulnerability (CVE-2026-16674) in IBM i versions 7.3 through 7.6 allows a remote authenticated attacker to achieve arbitrary code execution.

IBM i versions 7.3 through 7.6 contain a privilege management vulnerability that allows authenticated local attackers to achieve elevated system privileges.

IBM i versions 7.3 through 7.6 contain a high-severity vulnerability (CVE-2026-17197) that allows remote, unauthenticated attackers to bypass security restrictions due to improper validation of client-asserted identity.

IBM i versions 7.3 through 7.6 are vulnerable to an integer underflow flaw (CVE-2026-17485) that could allow a remote, unauthenticated attacker to cause a denial of service or perform an out-of-bounds read to access sensitive information.