CVE-2026-17015

Analyzed Analyzed - Analysis Complete

Denial of Service and Information Disclosure in IBM i

Publication date: 2026-08-19

Last updated on: 2026-08-24

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-24

Generated

2026-09-09

AI Q&A

2026-08-20

EPSS Evaluated

2026-09-07

NVD

CVE-2026-17015

EUVD

EUVD-2026-62854

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.3
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM i 7.6, 7.5, 7.4, and 7.3 allows a remote authenticated attacker to cause a denial of service and access sensitive information. It occurs due to an out-of-bounds read issue in the system.

Detection Guidance

Detection requires checking for IBM i systems running versions 7.6, 7.5, 7.4, or 7.3 with remote authenticated access. Monitor for unusual network traffic or service disruptions. Apply IBM's official patches or updates as they become available.

Impact Analysis

The impact includes potential service disruption from denial of service and unauthorized access to sensitive data. Attackers could exploit this to crash systems or steal confidential information.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations may face compliance penalties and reputational damage.

Mitigation Strategies

Apply the latest IBM i PTFs or updates provided by IBM to address the out-of-bounds read issue. Monitor IBM i security advisories for patches and test updates in a non-production environment before deployment.

Hi! I’m here to help you understand CVE-2026-17015. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70