SQL Injection Vulnerability in IBM i from IBM
CVE-2026-16961

7.6HIGH

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
13 August 2026

What is CVE-2026-16961?

IBM i versions 7.6, 7.5, and 7.4 are susceptible to a SQL injection flaw. This vulnerability enables remote attackers to execute specially crafted SQL queries, which could lead to unauthorized access to sensitive data. Attackers may gain the ability to view, add, modify, or delete information within the back-end database, posing significant security risks. It is crucial for users to apply the recommended patches and update their systems to mitigate this threat.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7283298
vendor-advisorypatch

CVSS V3.1

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.