CVE Catalog
CVE-2026-16859
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.29%
22th percentile - higher than 22% of all known CVEs
Summary
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
Risk Assessment
A remote unauthenticated attacker can obtain sensitive information, potentially leading to confidentiality breaches. The lack of required authentication increases the risk of exploitation.
Recommendation
Apply security patches from IBM for IBM i. Restrict external network access to the system and monitor for unusual requests.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.