Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-17109— IBM i is Affected By Multiple Vulnerabilities in SQL

CVSS 4.3 · Medium EPSS 0.33% · P26

Possible ATT&CK Techniques 1AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 4

VendorProductVersion RangeStatus
IBMi7.6affected
7.5affected
7.4affected
7.3affected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-17109

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
IBM i is Affected By Multiple Vulnerabilities in SQL
Source: CVE Program / CVE List V5
Vulnerability Description
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
IBM i 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM i是美国IBM公司的一款操作系统。 IBM i 7.6版本、7.5版本、7.4版本和7.3版本存在输入验证错误漏洞，该漏洞源于参数注入，可能导致远程认证攻击者向命令添加意外参数。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
IBMi 7.6 cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-17109

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-17109

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-17109 (1)

Same Patch Batch · IBM · 2026-08-12 · 68 CVEs total

CVE-2024-2725310.0 CRITICALIBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews
CVE-2026-168609.9 CRITICALIBM i is Affected By Remote Code Execution Vulnerability []
CVE-2026-170839.8 CRITICALIBM i is Affected By Multiple Vulnerabilities in the Debug Server
CVE-2026-172189.8 CRITICALIBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon []
CVE-2026-169569.8 CRITICALIBM Db2 Mirror for i is vulnerable to OS command injection []
CVE-2026-172769.6 CRITICALIBM i is Affected By Multiple Vulnerabilities in Navigator for i
CVE-2026-180998.9 HIGHIBM i is Affected By Multiple Vulnerabilities in Navigator for i
CVE-2026-186698.8 HIGHIBM i is Affected By A Privilege Escalation Vulnerability []
CVE-2026-188478.8 HIGHIBM i is Affected By Multiple Vulnerabilities in Navigator for i
CVE-2026-187138.8 HIGHIBM i is Affected By Multiple Vulnerabilities in Navigator for i
CVE-2026-171108.8 HIGHIBM i is Affected By Multiple Vulnerabilities in SQL
CVE-2026-168568.8 HIGHIBM i is Affected By Multiple Vulnerabilities in Domain Name System
CVE-2026-169068.8 HIGHIBM i is Affected By Multiple Vulnerabilities in Domain Name System
CVE-2026-186838.8 HIGHIBM i is Affected By privilege escalation in Navigator for i
CVE-2026-174178.8 HIGHIBM i is Affected By Remote Code Execution Vulnerabilities [, ]
CVE-2026-170828.8 HIGHIBM i is Affected By Multiple Vulnerabilities in the Debug Server
CVE-2026-176428.8 HIGHIBM i is Affected By Remote Code Execution Vulnerabilities [, ]
CVE-2026-133618.8 HIGHIBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Executi
CVE-2026-131058.8 HIGHIBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
CVE-2026-120048.7 HIGHSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Ve

Showing top 20 of 68 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: i
Same vendor: IBM
Same weakness: CWE-20

V. Comments for CVE-2026-17109

No comments yet

Leave a comment