CVE Catalog

CVE-2026-16871

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.27%

19th percentile - higher than 19% of all known CVEs

Summary

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a heap buffer overflow.

Risk Assessment

An authenticated attacker could exploit a heap buffer overflow to obtain sensitive data, potentially leading to confidentiality breaches. Authentication is required, but the risk is significant.

Recommendation

Apply security patches from IBM for IBM i. Restrict system access and monitor for unusual activities.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a heap buffer overflow.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS