Denial of Service Vulnerability in IBM i from IBM
CVE-2026-17248

7.1HIGH

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
12 August 2026

What is CVE-2026-17248?

An improper neutralization of special elements in an operating system command in IBM i versions 7.3 to 7.6 allows a remote authenticated attacker to exploit this vulnerability, potentially leading to a denial of service. This could disrupt services and cause operational downtime, emphasizing the necessity for timely patches and updates to mitigate associated risks. Users are encouraged to review the vendor's advisory for detailed mitigation strategies.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7283276
vendor-advisorypatch

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.