CVE-2026-17004

Undergoing Analysis Undergoing Analysis - In Progress

IBM i Denial of Service via Infinite Loop

Publication date: 2026-08-13

Last updated on: 2026-08-17

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-17

Generated

2026-09-03

AI Q&A

2026-08-14

EPSS Evaluated

2026-09-02

NVD

CVE-2026-17004

EUVD

EUVD-2026-58235

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.3
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-835	The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM i versions 7.6, 7.5, 7.4, and 7.3 allows a remote attacker to cause a denial of service by triggering an infinite loop. This can exhaust system resources and make the system unresponsive.

Detection Guidance

This vulnerability causes a denial of service due to an infinite loop in IBM i systems. Detection may involve monitoring for unusual CPU or memory usage spikes on IBM i servers running versions 7.6, 7.5, 7.4, or 7.3. Check system logs for repeated errors or hangs in network services.

Impact Analysis

The vulnerability can disrupt services by causing system unavailability. Users may experience slow performance or complete outages, affecting productivity and access to critical applications.

Compliance Impact

This vulnerability could lead to a denial of service, potentially disrupting systems handling sensitive data. GDPR requires data protection measures, and HIPAA mandates availability of health information systems. A denial of service may violate these requirements by impairing access to critical data.

Mitigation Strategies

Apply the latest IBM i PTF or update to a fixed version to address the infinite loop issue. Monitor network traffic for unusual patterns indicating a denial of service attempt.

Hi! I’m here to help you understand CVE-2026-17004. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70