Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Priority LOW 33

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00191 Published 2026-09-04 No fix listed CWE-78
Priority LOW 29

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00498 Published 2026-09-04 No fix listed CWE-121
Priority LOW 25

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00281 Published 2026-09-04 No fix listed CWE-121
Priority LOW 29

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a NULL pointer dereference.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00501 Published 2026-09-04 No fix listed CWE-476
Priority LOW 24

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00322 Published 2026-09-04 No fix listed CWE-330
Priority LOW 33

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00175 Published 2026-09-04 No fix listed CWE-78
Priority LOW 19

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to inject parameters into a CL command due to improper neutralization of special elements.

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00151 Published 2026-09-04 No fix listed CWE-78
Priority LOW 29

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a memory leak.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00501 Published 2026-09-04 No fix listed CWE-401