CVE-2026-17076

Received Received - Intake

IBM i Denial of Service via DRDA/DDM Resync

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-13

Generated

2026-08-14

AI Q&A

2026-08-14

EPSS Evaluated

N/A

NVD

CVE-2026-17076

EUVD

EUVD-2026-58394

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.6
ibm	i	7.5
ibm	i	7.4
ibm	i	7.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM i 7.6, 7.5, 7.4, and 7.3 allows a remote attacker to cause a denial of service by improperly processing DRDA and DDM resynchronization requests.

Impact Analysis

The vulnerability could lead to system unavailability, disrupting services that rely on IBM i servers. It may cause performance degradation or complete service outages for affected systems.

Mitigation Strategies

Apply the latest IBM i PTFs or updates provided by IBM to address the improper processing of DRDA and DDM resynchronization requests. Monitor IBM security advisories for patches and follow their recommended mitigation steps.

Hi! I’m here to help you understand CVE-2026-17076. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70