CVE-2026-81858: IBM i is Affected By A Denial of Service Vulnerability in Host Servers
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.
Other sources
IBM i could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.6Patch SJ11622 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.5Patch SJ11621 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.4Patch SJ11620 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.3Patch SJ11619
Event History
Frequently Asked Questions
Which IBM i releases are affected?
IBM i 7.3, 7.4, 7.5, and 7.6 are identified as affected.
Does exploitation require authentication?
Yes. The vulnerability requires a remote attacker to be authenticated.
What access path is implicated?
The issue is in the IBM i File Server, where an out-of-bounds read can lead to denial of service and information disclosure.