CVE-2026-17088: IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability.
Other sources
IBM i could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM i 7.6 (Release5770-SS1 Option 34)to a version that resolves this vulnerability.Fixed in 7.6Patch SJ10907 - Upgrade
Upgrade
IBM i 7.5 (Release5770-SS1 Option 34)to a version that resolves this vulnerability.Fixed in 7.5Patch SJ10906 - Upgrade
Upgrade
IBM i 7.4 (Release5770-SS1 Option 34)to a version that resolves this vulnerability.Fixed in 7.4Patch SJ10905 - Upgrade
Upgrade
IBM i 7.3 (Release5770-SS1 Option 34)to a version that resolves this vulnerability.Fixed in 7.3Patch SJ10904
Event History
Frequently Asked Questions
What is the severity of CVE-2026-17088?
CVE-2026-17088 has a medium severity score of 4.3.
What does CVE-2026-17088 affect?
CVE-2026-17088 affects IBM i versions 7.6, 7.5, 7.4, and 7.3.
What type of vulnerability is identified in CVE-2026-17088?
CVE-2026-17088 is identified as a path traversal vulnerability.
How can an attacker exploit CVE-2026-17088?
A remote authenticated attacker can exploit CVE-2026-17088 to obtain sensitive information.
What are the possible impacts of CVE-2026-17088?
The primary impact of CVE-2026-17088 is the potential exposure of sensitive information.