CVE-2026-17476: IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write.
Other sources
IBM i could allow a remote attacker to cause a denial of service due to an improper buffer write.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ11037 - Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ11013 - Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ11014 - Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ11041 - Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ11042 - Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ11063 - Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ11064 - Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ11065 - Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ11066 - Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ11078 - Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ11079 - Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ11080 - Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ11081 - Upgrade
Upgrade
IBM i Release5770-JV1 (IBM Java SDK/Runtime)to a version that resolves this vulnerability.Patch SJ10990
Event History
Frequently Asked Questions
What is the severity of CVE-2026-17476?
The severity of CVE-2026-17476 is classified as medium with a score of 4.8.
What products are affected by CVE-2026-17476?
CVE-2026-17476 affects IBM i versions 7.6, 7.5, 7.4, and 7.3.
How can CVE-2026-17476 be exploited by attackers?
CVE-2026-17476 can be exploited by remote attackers to cause a denial of service due to an improper buffer write.
What is the impact of CVE-2026-17476?
The impact of CVE-2026-17476 includes potential denial of service on affected IBM i systems.
How do I mitigate the risks associated with CVE-2026-17476?
To mitigate the risks of CVE-2026-17476, ensure that your IBM i systems are updated with the latest patches provided by IBM.