Skip to content
Threat Feed
Subscribe

Tag

Ibm-I

5 briefs RSS
critical advisory

IBM i HTTP Server Administration Vulnerability

IBM i versions 7.3 through 7.6 contain an improper data sanitization vulnerability in the HTTP Server Administration interface that allows remote authenticated attackers to execute arbitrary code or exfiltrate sensitive data.

IBM i +1 web-vulnerability rce ibm-i privilege-escalation cve
3t 1c updated
high advisory

IBM i TOCTOU Race Condition Vulnerability

IBM i versions 7.3 through 7.6 contain a time-of-check time-of-use (TOCTOU) race condition that allows a local authenticated attacker to gain unauthorized access to sensitive files.

i 7.3 +3 ibm-i cve race-condition privilege-escalation
1t 1c
high advisory

Arbitrary Code Execution in IBM i via Untrusted Search Path

An untrusted search path vulnerability (CVE-2026-16674) in IBM i versions 7.3 through 7.6 allows a remote authenticated attacker to achieve arbitrary code execution.

i ibm-i cve-2026-16674 arbitrary-code-execution untrusted-search-path
1t 1c
critical advisory

Remote Command Injection in IBM Db2 Mirror for i

IBM Db2 Mirror for i versions 7.4 through 7.6 contain a critical command injection vulnerability allowing remote unauthenticated attackers to execute arbitrary system commands.

Db2 Mirror for i remote-code-execution vulnerability ibm-i
2t 1c
critical advisory

Uncontrolled Search Path Vulnerability in IBM i

IBM i versions 7.3 through 7.6 contain an uncontrolled search path element vulnerability that allows a remote authenticated attacker to execute arbitrary code with elevated privileges.

IBM i +6 vulnerability remote-code-execution ibm-i privilege-escalation cve-2026-16856
3t 5c updated