CVE-2026-17476

Analyzed Analyzed - Analysis Complete

Buffer Overflow Denial of Service in IBM i

Publication date: 2026-08-13

Last updated on: 2026-08-19

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-19

Generated

2026-09-03

AI Q&A

2026-08-14

EPSS Evaluated

2026-09-02

NVD

CVE-2026-17476

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.3
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 are vulnerable to a denial of service attack due to an improper buffer write. This flaw allows a remote attacker to exploit the issue and cause the system to stop responding.

Detection Guidance

This vulnerability is specific to IBM i systems and involves a denial of service due to improper buffer write. Detection requires checking IBM i system logs for unusual network traffic or crashes. Commands like DSPLOG for viewing logs or WRKACTJOB to monitor active jobs may help identify suspicious activity.

Impact Analysis

This vulnerability could lead to system downtime and disrupt normal operations. Affected systems may become unresponsive, causing service interruptions for users and applications relying on IBM i.

Compliance Impact

This vulnerability could lead to a denial of service, which may impact the availability of systems processing personal or sensitive data. Compliance with standards like GDPR or HIPAA often requires maintaining system availability and protecting data integrity, so such disruptions could pose risks to compliance.

Mitigation Strategies

Apply the latest IBM i PTF or update to the latest version to address the improper buffer write issue. Monitor IBM's official security advisories for patches and follow their recommended mitigation steps.

Hi! I’m here to help you understand CVE-2026-17476. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70