CVE-2026-16929

Undergoing Analysis Undergoing Analysis - In Progress

Buffer Overflow in IBM i Leading to Information Disclosure

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a buffer overflow.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-13

Generated

2026-08-14

AI Q&A

2026-08-14

EPSS Evaluated

N/A

NVD

CVE-2026-16929

EUVD

EUVD-2026-58236

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.6
ibm	i	7.5
ibm	i	7.4
ibm	i	7.3
ibm	ibm_i	From 7.3 (inc) to 7.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 are vulnerable to a buffer overflow issue. A remote authenticated attacker could exploit this to obtain sensitive information.

Impact Analysis

An attacker could gain access to sensitive data due to the buffer overflow. This may lead to unauthorized information disclosure if exploited.

Mitigation Strategies

Apply the appropriate PTFs as recommended by IBM to remediate the buffer overflow vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6.

Hi! I’m here to help you understand CVE-2026-16929. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70