CVE Catalog
CVE-2026-17111
HighCVSS 7.6Exploitation Probability (EPSS)
Low risk0.22%
13th percentile - higher than 13% of all known CVEs
Summary
IBM i versions 7.6, 7.5, 7.4, and 7.3 are vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Risk Assessment
An attacker could gain unauthorized access to database data, potentially leading to leakage or manipulation of sensitive information.
Recommendation
Apply IBM patches and implement input validation and parameterized queries.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.