CVE-2026-17071: IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager

Published Aug 12, 2026

Updated

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal.

Other sources

IBM i could allow a remote authenticated attacker to perform file manipulation due to path traversal.

— IBM

Affected Software

4 affected components

IBM i<=7.6

IBM i<=7.5

IBM i<=7.4

IBM i<=7.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM i 7.6 to a version that resolves this vulnerability.
Fixed in 7.6Patch SJ10907
Upgrade
Upgrade IBM i 7.5 to a version that resolves this vulnerability.
Fixed in 7.5Patch SJ10906
Upgrade
Upgrade IBM i 7.4 to a version that resolves this vulnerability.
Fixed in 7.4Patch SJ10905
Upgrade
Upgrade IBM i 7.3 to a version that resolves this vulnerability.
Fixed in 7.3Patch SJ10904

Event History

Aug 12, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Aug 13, 2026

CVE Published

via MITRE·08:22 PM

Data Sourced

via MITRE·08:22 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7283569

Frequently Asked Questions

What is the severity of CVE-2026-17071?

The severity of CVE-2026-17071 is classified as low.

How do I fix CVE-2026-17071?

Fixing CVE-2026-17071 may involve applying the latest patches for IBM i or implementing suitable workarounds provided by IBM.

What systems are affected by CVE-2026-17071?

CVE-2026-17071 affects IBM i versions 7.6, 7.5, 7.4, and 7.3.

What type of attack does CVE-2026-17071 allow?

CVE-2026-17071 allows a remote authenticated attacker to perform file manipulation due to path traversal.

What is the vulnerable component related to CVE-2026-17071?

The vulnerable component related to CVE-2026-17071 is the Digital Certificate Manager in IBM i.

CVE-2026-17071: IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager

Other sources

Affected Software

Remediation

Event History

Parent advisories

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-17071?

How do I fix CVE-2026-17071?

What systems are affected by CVE-2026-17071?

What type of attack does CVE-2026-17071 allow?

What is the vulnerable component related to CVE-2026-17071?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-17071?

How do I fix CVE-2026-17071?

What systems are affected by CVE-2026-17071?

What type of attack does CVE-2026-17071 allow?

What is the vulnerable component related to CVE-2026-17071?