CVE-2026-1376— IBM i Denial of Service
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-1376
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM i Denial of Service
Source: CVE Program / CVE List V5
Vulnerability Description
IBM i 7.6 could allow a remote attacker to cause a denial of service using failed authentication connections due to improper allocation of resources.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不加限制或调节的资源分配
Source: CVE Program / CVE List V5
Vulnerability Title
IBM i 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM i是美国国际商业机器（IBM）公司的一套运行在IBM Power Systems和IBM PureSystems中的操作系统。 IBM i 7.6版本存在安全漏洞，该漏洞源于资源分配不当，可能导致远程攻击者利用失败的身份验证连接造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-1376
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-1376
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-1376 (1)
Same Patch Batch · IBM · 2026-03-17 · 6 CVEs total
| CVE-2025-14031 | 7.5 HIGH | IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service |
| CVE-2026-1264 | 7.1 HIGH | IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls |
| CVE-2026-1267 | 6.5 MEDIUM | IBM Planning Analytics Information Disclosure |
| CVE-2025-14806 | 5.7 MEDIUM | IBM Planning Analytics Information Disclosure |
| CVE-2026-3856 | 5.3 MEDIUM | IBM Db2 Recovery Expert Missing Integrity Check |
IV. Related Vulnerabilities
Same product: i
- CVE-2026-18715
IBM i is Affected By Multiple Vulnerabilities in WebSphere A - CVE-2026-18671
IBM i is Affected By Multiple Vulnerabilities in NetServer - CVE-2026-18511
IBM i is Affected By Multiple Vulnerabilities in Java Secure - CVE-2026-18509
IBM i is Affected By A Prvilege Escalation Vulnerability [] - CVE-2026-18249
IBM i Is Affected By Multiple Vulnerabilities in IBM Java SD
Same vendor: IBM
- CVE-2026-18554
IBM Db2 Mirror for i is affected by multiple vulnerabilities - CVE-2026-18178
IBM Db2 Mirror for i is affected by multiple vulnerabilities - CVE-2026-17227
IBM Db2 Mirror for i is affected by multiple vulnerabilities - CVE-2026-17209
IBM Db2 Mirror for i is affected by multiple vulnerabilities - CVE-2026-17186
IBM Db2 Mirror for i is affected by multiple vulnerabilities
Same weakness: CWE-770
- CVE-2026-72888
Net::OAuth versions before 0.32 for Perl allow memory exhaus - CVE-2026-74788
Scriban before 7.0.0 Denial of Service via string.pad_left/p - CVE-2026-74786
Scriban before 7.0.0 Denial of Service via Unbounded Templat - CVE-2026-74784
Scriban before 7.2.0 Denial of Service via array.insert_at - CVE-2026-73062
Scriban 3.0.0 through 7.2.0 Denial of Service via Array Mult
V. Comments for CVE-2026-1376
No comments yet