CVE-2026-17272

IBM i is Affected By a Denial of Service in HTTP Server []

Assigner: ibm
Reserved: 24.07.2026 Published: 13.08.2026 Updated: 13.08.2026

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS Score: 8.2

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	Low
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	IBM
Product	i
Versions	Version 7.6 is affected Version 7.5 is affected Version 7.4 is affected Version 7.3 is affected

Vendor

IBM

Product

Versions

Version 7.6 is affected
Version 7.5 is affected
Version 7.4 is affected
Version 7.3 is affected

Solutions

IBM strongly recommends addressing the vulnerability now.

IBM i Release5770-DG1 PTF Number(s)PTF Download Link(s)7.6SJ10845 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10845 7.5SJ10844 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10844 7.4SJ10843 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10843 7.3SJ10842 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10842

IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.

References

Problem Types