CVE-2026-16878: IBM i is Affected By Multiple Vulnerabilities in NetServer
Published Aug 12, 2026
·Updated
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.
Other sources
IBM i could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.
— IBM
Affected Software
5 affected components
IBM IBM i>=7.3<=7.6
IBM i<=7.6
IBM i<=7.5
IBM i<=7.4
IBM i<=7.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM i (IBM i 7.6)to a version that resolves this vulnerability.Fixed in 7.6Patch MJ10939 - Upgrade
Upgrade
IBM i (IBM i 7.5)to a version that resolves this vulnerability.Fixed in 7.5Patch MJ10938 - Upgrade
Upgrade
IBM i (IBM i 7.4)to a version that resolves this vulnerability.Fixed in 7.4Patch MJ10937 - Upgrade
Upgrade
IBM i (IBM i 7.3)to a version that resolves this vulnerability.Fixed in 7.3Patch MJ10936
Event History
Aug 12, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Aug 13, 2026
CVE Published
via MITRE·07:51 PM
Data Sourced
via MITRE·07:51 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeakness