CVE-2026-17226: IBM i is Affected By Multiple Vulnerabilities in NetServer
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.
Other sources
IBM i could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Patch MJ10939 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Patch MJ10938 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Patch MJ10937 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Patch MJ10936
Event History
Frequently Asked Questions
What is the severity of CVE-2026-17226?
The severity of CVE-2026-17226 is medium with a CVSS score of 5.4.
What systems are affected by CVE-2026-17226?
CVE-2026-17226 affects IBM i versions 7.6, 7.5, 7.4, and 7.3.
How can I fix CVE-2026-17226?
To mitigate CVE-2026-17226, users should apply the latest security updates provided by IBM for the affected IBM i versions.
What type of attacks are possible with CVE-2026-17226?
CVE-2026-17226 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service.
What is the impact of CVE-2026-17226?
The impact of CVE-2026-17226 includes potential exposure of sensitive information and service disruptions due to denial of service.