CVE-2026-16692: IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow.
Other sources
IBM i could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.6Patch SJ11061 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.6Patch SJ11123 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.6Patch SJ11127 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.6Patch SJ11129 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.6Patch SJ11131 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.5Patch SJ11074 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.5Patch SJ11131 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.4Patch SJ11083 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.3Patch SJ11084 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.3Patch SJ11129 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.4Patch SJ11123
Event History
Frequently Asked Questions
What is the severity of CVE-2026-16692?
The severity of CVE-2026-16692 is medium with a score of 6.5.
What type of vulnerability is described in CVE-2026-16692?
CVE-2026-16692 describes a stack-based buffer overflow vulnerability.
How can CVE-2026-16692 be exploited?
CVE-2026-16692 can be exploited by a remote authenticated attacker to cause a denial of service.
Which versions of IBM i are affected by CVE-2026-16692?
CVE-2026-16692 affects IBM i versions 7.6, 7.5, 7.4, and 7.3.
What is the impact of CVE-2026-16692 on the affected systems?
The impact of CVE-2026-16692 is a denial of service that can affect the availability of the system.