CVE Catalog

CVE-2026-16975

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.52%

42th percentile - higher than 42% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a heap-based buffer overflow.

Risk Assessment

An authenticated attacker could execute arbitrary code on the system, potentially leading to full system and data compromise.

Recommendation

Apply security patches from IBM and monitor remote user accounts for unusual activity.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a heap-based buffer overflow.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS