CVE-2026-107674Medium· 5.1▾ SunlitIBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service fro…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 28.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.
i 7.6i 7.5i 7.4i 7.3IBM strongly recommends addressing the vulnerability now.
IBM i Release5770-SS1 Option 34 PTF Number(s)PTF Download Link(s)7.6SJ11846 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11846 7.5SJ11845 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11845 7.4SJ11844 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11844 7.3SJ11843 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11843
IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-102917High· 7.8IBM i is Affected By An Improper Privilege Management Vulnerability
CVE-2026-17488Medium· 4.3IBM i is Affected By An Improper Authentication Vulnerability in SST / DST
CVE-2026-17073Medium· 5.4IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System
CVE-2026-17491Medium· 5.4IBM i is Affected By An Improper Privilege Management Vulnerability in OpenSSH
CVE-2026-17068Medium· 5.4IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System
CVE-2026-17275Low· 3.7IBM i is Affected by an Improper Validation Vulnerability