IBM i LPD Out-of-Bounds Write RCE Vulnerability (CVE-2026-17218) Advisory

Vulnerability Overview CVE ID: CVE-2026-17218 Description: A remote code execution vulnerability exists in IBM i due to an out-of-bounds write issue in the Line Printer Daemon (LPD). CWE: CWE-787: Out-of-bounds Write CVSS Score: 9.8 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products Affected Product: IBM i Affected Versions: - 7.4 - 7.5 - 7.4 - 7.3 Remediation IBM strongly recommends applying this fix immediately. Fixed Versions: - IBM i 7.6: PTF S10972 - IBM i 7.5: PTF S10996 - IBM i 7.4: PTF S10929 - IBM i 7.3: PTF S10930 Additional Information Workaround: None References: - Complete CVSS v3 Guide - Online Calculator v3 Disclaimer According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an industry open standard intended to communicate vulnerability severity and help prioritize responses. IBM provides CVSS scores "AS IS" without any warranties, either express or implied, including the implied warranties of merchantability and fitness for a particular purpose. Customers are responsible for evaluating the impact of any actual or potential security vulnerabilities. Document Location Global: - Business Unit: BU070, BU058 - Product: SWG60, SSTS2D, SSB23CE, SSKWRM - Component: PF012 - Platform: IBM i - Version: 7.6.0, 7.5.0, 7.4.0, 7.3.0 Document Information Date of Revision: August 11, 2026 Date of First Publication: August 11, 2026 UID: 7283277 Feedback Was this helpful?: Users can select "Helpful" or "Not helpful" to provide feedback. Need Support? Submit Feedback: IBM Support Phone Support: 1-800-IBM-7378 (USA) Global Contact Directory: Directory of worldwide contacts

Goal Reached Thanks to every supporter — we hit 100%!

IBM i LPD Out-of-Bounds Write RCE Vulnerability (CVE-2026-17218) Advisory

More from this source