CVE-2026-17218
Awaiting Analysis Awaiting Analysis - Queue

Remote Code Execution in IBM i

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: IBM Corporation

Description
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-08-13
AI Q&A
2026-08-12
EPSS Evaluated
N/A
NVD
CVE-2026-17218
EUVD
EUVD-2026-57384

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
ibm ibm_i to 7.3 (inc)
ibm ibm_i to 7.4 (inc)
ibm ibm_i to 7.5 (inc)
ibm ibm_i to 7.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IBM i 7.6, 7.5, 7.4, and 7.3 are vulnerable to a remote code execution flaw due to an out-of-bounds write in the Line Printer Daemon (LPD). This allows a remote attacker to execute arbitrary code on affected systems.

Detection Guidance

Detecting CVE-2026-17218 requires checking for the presence of the Line Printer Daemon (LPD) service and verifying if the system is running an affected IBM i version. Commands like 'systemctl status lpd' or 'ps aux | grep lpd' can help identify if LPD is running. Additionally, check IBM i version with 'system -V' or 'uname -a' and compare against affected releases (7.3, 7.4, 7.5, 7.6).

Impact Analysis

The vulnerability can lead to unauthorized remote code execution, potentially compromising confidentiality, integrity, and availability of the affected IBM i systems. Attackers could gain full control over the system.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR and HIPAA compliance due to unauthorized access and potential data exposure. Organizations must patch systems to maintain compliance.

Mitigation Strategies

Apply the provided IBM PTF patches immediately: SJ10872 for 7.6, SJ10896 for 7.5, SJ10929 for 7.4, and SJ10930 for 7.3. Disable the Line Printer Daemon (LPD) if not required by running 'systemctl stop lpd' and 'systemctl disable lpd'. Isolate affected systems from untrusted networks until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17218. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart