CVE Catalog
CVE-2026-16961
HighCVSS 7.6Exploitation Probability (EPSS)
Low risk0.27%
19th percentile - higher than 19% of all known CVEs
Summary
IBM i versions 7.6, 7.5, and 7.4 are vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Risk Assessment
An attacker could gain unauthorized access to database data, potentially leading to confidentiality, integrity, and availability breaches.
Recommendation
Apply security patches from IBM and implement input validation and parameterized SQL queries in applications.
Original NVD description (English source)
IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.