CVE-2026-18671: IBM i is Affected By Multiple Vulnerabilities in NetServer
IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request processing. The attacker could exploit this vulnerability to cause a temporary denial of service.
Other sources
IBM i could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request processing. The attacker could exploit this vulnerability to cause a temporary denial of service.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM i (NetServer)to a version that resolves this vulnerability.Fixed in 7.6Patch MJ10939 - Upgrade
Upgrade
IBM i (NetServer)to a version that resolves this vulnerability.Fixed in 7.5Patch MJ10938 - Upgrade
Upgrade
IBM i (NetServer)to a version that resolves this vulnerability.Fixed in 7.4Patch MJ10937 - Upgrade
Upgrade
IBM i (NetServer)to a version that resolves this vulnerability.Fixed in 7.3Patch MJ10936
Event History
Frequently Asked Questions
What is the severity of CVE-2026-18671?
The severity of CVE-2026-18671 is rated medium with a score of 6.5.
What are the affected systems for CVE-2026-18671?
CVE-2026-18671 affects IBM i versions 7.6, 7.5, 7.4, and 7.3.
How can CVE-2026-18671 be exploited?
An authenticated attacker can exploit CVE-2026-18671 to trigger a NetServer server thread exception, resulting in a temporary denial of service.
What is the impact of CVE-2026-18671?
The impact of CVE-2026-18671 is a temporary denial of service due to an integer overflow in request processing.
How do I mitigate CVE-2026-18671?
Mitigation for CVE-2026-18671 can typically be achieved through patches or updates provided by IBM for affected IBM i systems.