Denial of Service Vulnerability in IBM i Operating System
CVE-2026-19280

5.2MEDIUM

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
14 September 2026

What is CVE-2026-19280?

A buffer overflow vulnerability in the PASE (Portable Application Solutions Environment) process of IBM i versions 7.3 through 7.6 could potentially lead to a denial of service. An authenticated attacker capable of exploiting this vulnerability could intentionally terminate their own process, disrupting service functionality and affecting system availability. Users of affected versions are advised to assess their systems and apply any available patches to mitigate this vulnerability.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7287409
vendor-advisorypatch

CVSS V3.1

Score:
5.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.