CVE-2026-17199

Analyzed Analyzed - Analysis Complete

Denial of Service in IBM i

Publication date: 2026-08-13

Last updated on: 2026-08-17

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to unbounded resource allocation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-17

Generated

2026-09-03

AI Q&A

2026-08-14

EPSS Evaluated

2026-09-01

NVD

CVE-2026-17199

EUVD

EUVD-2026-58234

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	From 7.3 (inc) to 7.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM i 7.6, 7.5, 7.4, and 7.3 allows a remote attacker to cause a denial of service by exploiting unbounded resource allocation. This means the system may run out of resources due to excessive requests, leading to service disruption.

Detection Guidance

This vulnerability is specific to IBM i systems and involves unbounded resource allocation leading to denial of service. Detection requires monitoring for unusual resource consumption patterns on IBM i servers. Check for processes consuming excessive CPU, memory, or disk I/O using system monitoring tools like WRKACTJOB, DSPLOG, or IBM i Navigator. Review network traffic for unexpected spikes targeting IBM i services.

Impact Analysis

The impact includes system downtime, degraded performance, or complete unavailability of IBM i services. This can disrupt business operations, data access, and user productivity.

Compliance Impact

This vulnerability could lead to a denial of service due to unbounded resource allocation, which may disrupt critical systems. For GDPR, such disruptions could impact data availability and processing, potentially violating Article 32 requirements for security and integrity. For HIPAA, it may affect the availability of protected health information systems, risking compliance with the Security Rule's integrity and availability standards.

Mitigation Strategies

Apply the latest IBM i PTFs or updates provided by IBM to address unbounded resource allocation issues. Monitor network traffic for unusual patterns that may indicate denial of service attempts.

Hi! I’m here to help you understand CVE-2026-17199. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70