Known vulnerabilities in IBM i

Vendor: IBM Corporation
Software: IBM i
Software CPE: cpe:2.3:o:ibm_corporation:ibm_i:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 269
Public exploits: 20
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM i IBM i is affected by 269 known vulnerabilities: 2 critical, 19 high, 164 medium, 84 low Critical High Medium Low

Vulnerabilities (269)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145417 - Out-of-bounds write
CVE-2026-63072		 CWE-787 Medium
No
No
 - 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 32 more
#VU145418 - NULL Pointer Dereference
CVE-2026-63076		 CWE-476 Medium
No
No
 - 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 16 more
#VU145420 - Asymmetric Resource Consumption (Amplification)
CVE-2026-54874		 CWE-405 Medium
No
No
 - 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 23 more
#VU145422 - Allocation of Resources Without Limits or Throttling
CVE-2026-63074		 CWE-770 Low
No
No
 - 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 11 more
#VU145424 - Improper Validation of Integrity Check Value
CVE-2026-75803		 CWE-354 Low
No
No
 - 26.08.2026 SB2026082627
SB2026082629
SB2026082670
and 10 more
#VU137701 - Improper Access Control
CVE-2026-59999		 CWE-284 Low
No
No
 - 15.07.2026 SB2026071535
SB20260715100
SB20260728131
and 10 more
#VU137703 - Protection Mechanism Failure
CVE-2026-60001		 CWE-693 Medium
No
No
 - 15.07.2026 SB2026071535
SB20260715100
SB20260728131
and 10 more
#VU136952 - Improper input validation
CVE-2026-63379		 CWE-20 High
No
No
 - 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 5 more
#VU136949 - Expired pointer dereference
CVE-2026-63381		 CWE-825 Low
No
No
 - 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 6 more
#VU136946 - Improper input validation
CVE-2026-63382		 CWE-20 Medium
No
No
 - 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 8 more
#VU136944 - Out-of-bounds read
CVE-2026-63383		 CWE-125 Medium
No
No
 - 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 9 more
#VU136943 - Integer overflow
CVE-2026-63384		 CWE-190 Medium
No
No
 - 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 9 more
#VU136941 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-63385		 CWE-444 Medium
No
No
 - 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 9 more
#VU136940 - Stack-based buffer overflow
CVE-2026-63387		 CWE-121 Medium
No
No
 - 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 9 more
#VU136938 - Out-of-bounds write
CVE-2026-63388		 CWE-787 Low
No
No
 - 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 8 more
#VU134271 - Improper input validation
CVE-2026-34182		 CWE-20 High
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 26 more
#VU134277 - Out-of-bounds read
CVE-2026-9076		 CWE-125 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 37 more
#VU134278 - Out-of-bounds read
CVE-2026-34180		 CWE-125 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 37 more
#VU134281 - NULL Pointer Dereference
CVE-2026-42766		 CWE-476 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 38 more
#VU120620 - Out-of-bounds write
CVE-2025-23299		 CWE-787 Low
No
No
 - 29.12.2025 SB2025122912
SB2025122913
SB2026072323
and 1 more


Showing elements 1 - 20 out of 269