Remote Denial of Service Vulnerability in IBM i Products by IBM

CVE-2026-4942

What is CVE-2026-4942?

A vulnerability exists in IBM i versions that potentially allows an attacker to exploit the Transport Layer Security (TLS) protocol. By sending specifically crafted messages to the server, an attacker could force the server to downgrade its TLS protocol to an earlier, less secure version which has been intentionally disabled in server configurations. This could expose sensitive data and systems to unauthorized access or other malicious activities, compromising the integrity and security of the affected systems.

References