CVE-2026-17078

Analyzed Analyzed - Analysis Complete

Denial of Service in IBM i

Publication date: 2026-08-13

Last updated on: 2026-08-19

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to resource exhaustion.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-19

Generated

2026-09-03

AI Q&A

2026-08-14

EPSS Evaluated

2026-09-01

NVD

CVE-2026-17078

EUVD

EUVD-2026-58396

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.3
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability is a denial of service issue in IBM i versions 7.6, 7.5, 7.4, and 7.3. A remote attacker could exploit it to cause resource exhaustion, leading to system unavailability or degraded performance.

Detection Guidance

This vulnerability causes resource exhaustion leading to denial of service. Detection requires monitoring system resources like CPU, memory, and network connections on IBM i systems. Check for unusual spikes in resource usage or unresponsive services. Use IBM i commands like WRKSYSACT to monitor system activity and WRKACTJOB to view active jobs. Network monitoring tools can also detect abnormal traffic patterns targeting IBM i ports.

Impact Analysis

The impact includes potential downtime or reduced functionality of IBM i systems. This could disrupt business operations, affect user access, and lead to productivity losses if the system becomes unresponsive.

Compliance Impact

This vulnerability causes a denial of service due to resource exhaustion, which could disrupt system availability. For GDPR, availability is a key principle, so prolonged outages may impact compliance. HIPAA also requires safeguards for data availability, making this a potential compliance risk if systems are unavailable.

Mitigation Strategies

Monitor network traffic for unusual resource consumption patterns. Apply IBM i PTFs or updates as they become available to address the denial of service issue.

Hi! I’m here to help you understand CVE-2026-17078. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70