Buffer Overflow Vulnerability in IBM i Affects Multiple Versions
CVE-2026-19086

3.3LOW

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
14 September 2026

What is CVE-2026-19086?

A buffer overflow vulnerability exists in multiple versions of IBM i, where an authenticated attacker can exploit a flaw in the PASE process. This could potentially lead to the termination of their own process, impacting system availability. It is crucial for users to apply security patches and review their systems to mitigate any associated risks.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7287409
vendor-advisorypatch

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.