Known vulnerabilities in IBM i

Vendor: IBM Corporation
Software: IBM i
Software CPE: cpe:2.3:o:ibm_corporation:ibm_i:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 253
Public exploits: 20
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM i IBM i is affected by 253 known vulnerabilities: 2 critical, 18 high, 155 medium, 78 low Critical High Medium Low

Vulnerabilities (253)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134270 - Use After Free
CVE-2026-45447		 CWE-416 High
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 45 more
#VU134271 - Improper input validation
CVE-2026-34182		 CWE-20 High
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 21 more
#VU134275 - Improper Initialization
CVE-2026-45445		 CWE-665 Low
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 20 more
#VU134276 - Heap-based Buffer Overflow
CVE-2026-7383		 CWE-122 Low
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 33 more
#VU134277 - Out-of-bounds read
CVE-2026-9076		 CWE-125 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 34 more
#VU134278 - Out-of-bounds read
CVE-2026-34180		 CWE-125 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 34 more
#VU134281 - NULL Pointer Dereference
CVE-2026-42766		 CWE-476 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 35 more
#VU134282 - NULL Pointer Dereference
CVE-2026-42767		 CWE-476 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 22 more
#VU134287 - Improper Verification of Cryptographic Signature
CVE-2026-45446		 CWE-347 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 17 more
#VU128473 - Improper input validation
CVE-2026-35386		 CWE-20 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 16 more
#VU128475 - Improper Privilege Management
CVE-2026-35385		 CWE-269 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 30 more
#VU128476 - Improper Access Control
CVE-2026-35387		 CWE-284 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 17 more
#VU128477 - Improper Authorization
CVE-2026-35388		 CWE-285 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 19 more
#VU125564 - Use After Free
CVE-2026-28387		 CWE-416 High
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 30 more
#VU125565 - NULL Pointer Dereference
CVE-2026-28388		 CWE-476 Low
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 39 more
#VU125566 - NULL Pointer Dereference
CVE-2026-28389		 CWE-476 Medium
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 32 more
#VU125567 - NULL Pointer Dereference
CVE-2026-28390		 CWE-476 Medium
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040992
and 50 more
#VU125568 - Heap-based Buffer Overflow
CVE-2026-31789		 CWE-122 Medium
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 23 more
#VU123895 - Resource exhaustion
CVE-2026-27171		 CWE-400 Medium
No
No
 - 11.03.2026 SB2026021955
SB2026031155
SB2026031156
and 9 more
#VU120620 - Out-of-bounds write
CVE-2025-23299		 CWE-787 Low
No
No
 - 29.12.2025 SB2025122912
SB2025122913
SB2026072323
and 1 more


Showing elements 1 - 20 out of 253