[ CVE-2026-96119 · Published 13 Oct 2026 ]
Vulnerability in IBM i
CVSS 9.9
EPSS <1%1 agency advisoryFix available
[ Why it matters ]Priority signals
- Critical severity: CVSS 9.9
[ Description ]Official description
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application.
[ Fixes ]Fixes and patches
- Patch on ibm.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ Advisories ]Government CERT advisories
-
BSI CERT-BundWID-SEC-2026-3881
IBM i: Vulnerability allows code execution Translated from German
[ References ]References
- www.ibm.com/support/pages/node/7292159PatchVendor Advisory