CVE-2026-17077

Analyzed Analyzed - Analysis Complete

Denial of Service in IBM i Due to Uninitialized Variable

Publication date: 2026-08-13

Last updated on: 2026-08-19

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitialized variable.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-19

Generated

2026-09-03

AI Q&A

2026-08-14

EPSS Evaluated

2026-09-02

NVD

CVE-2026-17077

EUVD

EUVD-2026-58395

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.3
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-457	The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

Attack-Flow Graph

Executive Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 contain a vulnerability where a remote attacker could cause a denial of service by exploiting an uninitialized variable. This flaw may lead to system instability or unresponsiveness.

Detection Guidance

This vulnerability is specific to IBM i systems and involves an uninitialized variable causing a denial of service. Detection requires checking IBM i system logs for unusual crashes or service interruptions. No specific commands are provided in the context.

Impact Analysis

This vulnerability could allow attackers to disrupt services by triggering a denial of service, potentially causing system crashes or slowdowns. It may affect availability but does not directly expose data or enable unauthorized access.

Compliance Impact

This vulnerability causes a denial of service due to an uninitialized variable, which could disrupt system availability. Such disruptions may impact compliance with standards like GDPR or HIPAA that require data availability and system reliability, depending on the affected system's role in processing or storing regulated data.

Mitigation Strategies

Apply the latest IBM i PTFs or updates provided by IBM to address the uninitialized variable issue. Monitor IBM's security bulletins for patches and test them in a non-production environment before deployment.

Hi! I’m here to help you understand CVE-2026-17077. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70