CVE-2026-16863
Awaiting Analysis Awaiting Analysis - Queue

IBM i Out-of-Bounds Read Vulnerability

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: IBM Corporation

Description
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-08-13
AI Q&A
2026-08-12
EPSS Evaluated
N/A
NVD
CVE-2026-16863
EUVD
EUVD-2026-57381

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ibm ibm_i From 7.3 (inc) to 7.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IBM i 7.6, 7.5, 7.4, and 7.3 are vulnerable to an out-of-bounds read issue. This flaw allows a remote authenticated attacker to access sensitive information due to improper memory handling.

Detection Guidance

Detecting this vulnerability requires checking if your IBM i system is running an affected version (7.3, 7.4, 7.5, or 7.6) and if the required PTF fixes are applied. Use the command DSPPTF to list installed PTFs and verify if the fix for CVE-2026-16863 is present.

Impact Analysis

A remote attacker could exploit this to steal sensitive data from your IBM i system. The impact includes unauthorized information disclosure, which may lead to further attacks or compliance violations.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations may face penalties or legal consequences if sensitive data is compromised.

Mitigation Strategies

Apply the PTF fixes provided by IBM for your specific IBM i version (7.3, 7.4, 7.5, or 7.6) as soon as possible. If running an unsupported version, upgrade to a supported release. No workarounds are available, so patching is the only mitigation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16863. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart