CVE-2026-17212

Received Received - Intake

Denial of Service in IBM i via Out-of-Bounds Read

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-13

Generated

2026-08-14

AI Q&A

2026-08-14

EPSS Evaluated

N/A

NVD

CVE-2026-17212

EUVD

EUVD-2026-58401

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	ibm_i	7.6
ibm	ibm_i	7.5
ibm	ibm_i	7.4
ibm	ibm_i	7.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a denial of service issue in IBM i versions 7.6, 7.5, 7.4, and 7.3. It occurs due to an out-of-bounds read, which means an attacker could remotely exploit this flaw to cause the system to crash or become unavailable.

Impact Analysis

If exploited, this vulnerability could disrupt services by causing a denial of service, leading to system unavailability for legitimate users. It may require system restarts or patches to restore normal operations.

Mitigation Strategies

Apply IBM i PTFs or updates provided by IBM to address the out-of-bounds read issue. Monitor IBM's security advisories for patches and test them in a non-production environment before deployment.

Hi! I’m here to help you understand CVE-2026-17212. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70