CVE-2026-16878
Undergoing Analysis Undergoing Analysis - In Progress

IBM i Out-of-Bounds Read Vulnerability

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: IBM Corporation

Description
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-14
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-16878
EUVD
EUVD-2026-58376

Affected Vendors & Products

Showing 8 associated CPEs
Vendor Product Version / Range
ibm ibm_i 7.6
ibm ibm_i 7.5
ibm ibm_i 7.4
ibm ibm_i 7.3
ibm i 7.6
ibm i 7.5
ibm i 7.4
ibm i 7.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds read issue in IBM i operating systems versions 7.6, 7.5, 7.4, and 7.3. It allows a remote authenticated attacker to access sensitive information by exploiting improper memory handling.

Detection Guidance

This vulnerability involves an out-of-bounds read in IBM i systems. Detection requires checking for IBM i versions 7.6, 7.5, 7.4, or 7.3 and verifying if remote authenticated attackers can access sensitive information. No specific commands are provided in the context to detect this issue.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized disclosure of sensitive data stored on the IBM i system. Attackers may gain access to confidential information without needing elevated privileges beyond basic authentication.

Compliance Impact

This vulnerability could result in non-compliance with data protection regulations such as GDPR or HIPAA if sensitive personal or health information is exposed. Organizations may face legal penalties and reputational damage due to unauthorized data access.

Mitigation Strategies

Apply IBM i PTFs or updates as soon as they become available to address the out-of-bounds read issue. Monitor IBM PSIRT advisories for patches and restrict remote authenticated access to sensitive systems.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16878. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart