Threat database

IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI.

IBM Planning Analytics versions 2.0 and 2.1 Local are affected by a Cross-Site Request Forgery (CSRF) vulnerability. This flaw could allow an attacker to trick a user into executing unauthorized actions on the affected system. The vulnerability does not impact confidentiality but can lead to high integrity impact and low availability impact.

IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.8 contain a vulnerability involving insecure deserialization that can be exploited by a low-privileged administrative user to cause a denial of service when the restConnector-2.0 feature is enabled. This vulnerability does not impact confidentiality or integrity but can disrupt availability by consuming system resources.

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server (DoS) for that server.

CVE-2026-17223 is a high-severity vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6 that allows a remote authenticated attacker to execute arbitrary code due to a buffer overflow (CWE-787). The vulnerability has a CVSS score of 8.8, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation information is currently available.

CVE-2026-17206 is a high-severity vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6. It involves an out-of-bounds write (buffer overflow) that could allow a remote attacker to execute arbitrary code. The vulnerability has a CVSS 3.1 score of 8.1, indicating high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a buffer overflow.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to unbounded resource allocation.

CVE-2026-17229 is a vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6 that allows a remote attacker to cause a denial of service by triggering an infinite loop. This flaw is classified under CWE-835, which involves loops with unreachable exit conditions. The vulnerability has a high severity rating with a CVSS score of 7.5, indicating it is exploitable over the network without privileges or user interaction and impacts availability.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a heap buffer overflow.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and modify authentication metadata due to a buffer overflow.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of client-asserted identity.

CVE-2026-18071 is a high severity vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6 that allows a local attacker to gain elevated privileges due to improper privilege management.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive information due to an integer underflow.

IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.

IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition that results in improper isolation of request state when handling the built‑in X‑Client‑IP header. Under concurrent request processing, X‑Client‑IP values may be contaminated across requests, enabling IP spoofing and disclosure of other clients’ IP addresses.

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.