Denial of Service Vulnerability in IBM i for Digital Certificate Manager
CVE-2026-107674

5.1MEDIUM

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
16 October 2026

What is CVE-2026-107674?

IBM i versions 7.3, 7.4, 7.5, and 7.6 are exposed to a denial of service vulnerability affecting the Digital Certificate Manager (DCM). This flaw can be exploited by malicious actors attempting to create secure network connections, potentially preventing critical services from starting or forcing them to operate in a non-secure state. This vulnerability underscores the significance of maintaining up-to-date software and implementing robust security measures. For further information and patches, please refer to IBM's advisory.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7292225
vendor-advisorypatch

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.