Remote Code Execution Vulnerability in IBM i Web Application
CVE-2026-96119

9.9CRITICAL

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
12 October 2026

What is CVE-2026-96119?

A vulnerability exists in IBM i affecting versions 7.3 through 7.6, which could be exploited by a remote authenticated attacker. The flaw is rooted in the HTTP Server Administration web application, where improper data sanitization may permit attackers to access sensitive information or execute arbitrary code on the system, posing serious security risks to affected environments.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7292159
vendor-advisorypatch

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.