{"id":"CVE-2026-107674","title":"IBM i is Affected by a Denial of Service in Digital Certificate Manager","summary":"IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service fro…","severity":"medium","cvss":5.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","cvssSource":"cna","cwe":["CWE-667"],"vendor":"IBM","product":"i","affected":["i 7.6","i 7.5","i 7.4","i 7.3"],"published":"2026-10-16","updated":"2026-10-16","sourceUpdated":"2026-10-16T18:08:44.708Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-107674","references":[{"url":"https://www.ibm.com/support/pages/node/7292225"}],"tags":["cve.org"],"ingestedAt":"2026-10-16T18:43:08.629Z","slug":"CVE-2026-107674","body":"## Overview\n\nIBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.\n\n## Affected\n\n- `i 7.6`\n- `i 7.5`\n- `i 7.4`\n- `i 7.3`\n\n## Remediation\n\nIBM strongly recommends addressing the vulnerability now.\n\nIBM i Release5770-SS1 Option 34\nPTF Number(s)PTF Download Link(s)7.6SJ11846 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11846 7.5SJ11845 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11845 7.4SJ11844 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11844 7.3SJ11843 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11843 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":28.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}