Vulnerabilities

CVE-2026-17057 is a critical missing-authentication vulnerability (CWE-306) in IBM i, affecting all currently supported releases: 7.3, 7.4, 7.5, and 7.6. An unauthenticated remote attacker can reach an affected critical function over the network with no privileges or user interaction and trigger a denial of service and unauthorized modification of data; the CVSS vector indicates high integrity and availability impact with no confidentiality loss. The initial advisory data does not name the specific vulnerable interface or service, so defenders should consult the IBM PSIRT bulletin for the affected component. Any organization running IBM i 7.3, 7.4, 7.5, or 7.6 is potentially affected. There is currently no public proof-of-concept, no known in-the-wild exploitation, and the vulnerability is not in CISA KEV; EPSS estimates only a 0.4% chance of exploitation in the next 30 days.

Do: Monitor the IBM PSIRT security bulletin for CVE-2026-17057 and apply the corrective IBM i PTFs it specifies for 7.3, 7.4, 7.5, and 7.6 as soon as they are published. In the interim, restrict network access to IBM i servers—particularly any reachable from untrusted networks—and watch for unexpected service disruption or data changes. Given the high integrity and availability impact, prioritize patching systems that host critical transactional or ERP workloads.

IBM App Connect Enterprise (13.0.1.0 through 13.0.8.1 and 12.0.1.0 through 12.0.12.28) and the SAP Adapter of IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 are vulnerable to an XML external entity (XXE) injection flaw (CWE-611) in XML processing. An authenticated, low-privilege user (CVSS PR:L) who can supply crafted XML to affected parsing — such as message flows using the SAP Adapter that process untrusted XML documents or entity references — can cause the parser to resolve external entities. The CVSS vector shows scope change with high confidentiality impact and no integrity or availability impact, meaning an attacker's realistic gain is reading local files from the integration node and reaching internal network services (SSRF), not code execution or data modification. Any organization running the affected releases of App Connect Enterprise or the Integration Bus for z/OS SAP Adapter is affected. Exploitation is not currently known: there is no public proof-of-concept, the flaw is not in CISA KEV, and EPSS estimates only a 0.3% probability of exploitation in the next 30 days.

Do: Check IBM's security bulletin for CVE-2026-81832 and upgrade App Connect Enterprise to releases beyond 13.0.8.1 (13.x) and 12.0.12.28 (12.x), and apply IBM's fix for the Integration Bus for z/OS 10.1 SAP Adapter as specified in the advisory. Until patched, limit SAP Adapter flows to trusted XML sources and disable external entity/DOCTYPE resolution in XML parsing where the configuration supports it. Inventory integration nodes for use of the SAP Adapter and identify which run the affected version ranges to prioritize patching.

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.

CVE-2026-77822 is a server-side request forgery (CWE-918) in IBM ContextForge MCP Gateway that abuses DNS rebinding: a remote authenticated user can get the gateway to resolve a hostname under their influence and then change that hostname's DNS answer, so the gateway's outbound request is redirected to internal or otherwise restricted resources. Because the SSRF validation happens before the rebinding, the crafted request bypasses URL checks and is issued from the gateway's trusted network position. The attacker can obtain sensitive information from systems reachable by the gateway; the CVSS 3.1 scoring (attack complexity high, low privileges required, no user interaction, scope changed, high confidentiality and integrity impact, no availability impact) indicates the flaw is rated high severity and that requests can affect components beyond the gateway process itself. Organizations running IBM ContextForge MCP Gateway are affected, and an authenticated, low-privileged account on the gateway is required. There is currently no evidence of exploitation: EPSS is 0.2% (11th percentile), the flaw is not in CISA KEV, and no public proof-of-concept is known.

Do: Monitor the IBM security bulletin for CVE-2026-77822 and upgrade ContextForge MCP Gateway to the fixed release once IBM publishes one, since no fixed version is identified in the available data. Until patched, restrict which accounts can trigger outbound URL fetches and apply egress controls that defeat rebinding (e.g., resolve hostnames once before validation, block external hostnames whose DNS answers later resolve to internal/RFC1918 addresses, and limit the gateway's access to internal-only hosts). Inventory your deployment to confirm which instances are reachable remotely, since exploitation requires network access to the gateway plus valid low-privileged credentials.

IBM Netezza Software 11.3.0.3 through Interim Fix 002 contains hardcoded credentials in the application source code (CWE-522, insufficiently protected credentials), which allow unauthorized access to the product's container registry. Because the secret is embedded in the code and requires no privileges or user interaction to use (CVSS:3.1/AV:N/AC:L/PR:N/UI:N), an attacker with network access can authenticate to the registry using the embedded credential. Successful abuse lets the attacker pull private container images, potentially exposing proprietary code, configuration details, and other sensitive information. Anyone running an affected IBM Netezza Software release in the 11.3.0.3 through Interim Fix 002 range is in scope. There is no known public proof-of-concept, the flaw is not in CISA KEV, and EPSS puts 30-day exploitation probability at roughly 0.2%, so no exploitation is currently known.

Do: Upgrade Netezza Software to a fixed release/interim fix newer than 11.3.0.3 IF002 per IBM's advisory. Until patched, restrict network access to the container registry, treat the embedded registry credential as compromised by rotating it, and review registry access logs for unauthorized pulls of private images.

IBM Concert versions 1.0.0 through 2.3.1 contain a SQL injection flaw (CWE-89) in the product's handling of back-end database queries. A remote attacker can send specially crafted SQL statements over the network without authentication or user interaction, per the CVSS vector (AV:N/AC:L/PR:N/UI:N). Successful exploitation allows the attacker to view, add, modify, or delete information stored in the back-end database, exposing or corrupting operational data managed by Concert. Any organization running IBM Concert 1.0.0 through 2.3.1 is affected, including both self-hosted and containerized enterprise deployments. There is currently no public proof of concept, the flaw is not in CISA's KEV catalog, and EPSS estimates only a 0.5% probability of exploitation in the next 30 days, so no in-the-wild exploitation is known.

Do: Inventory your environment for IBM Concert instances and verify running versions; upgrade any instance at version 2.3.1 or earlier to a fixed release once IBM publishes it in the corresponding IBM Security Bulletin. Until patching, restrict network access to Concert and its back-end database to trusted users and review database logs for anomalous or unexpected SQL queries. Continue monitoring the IBM advisory and CISA KEV for updates, as critical unauthenticated injection flaws often receive automated exploitation tooling once a PoC appears.

CVE-2026-16821 is a format string vulnerability (CWE-134) in IBM AIX 7.2, AIX 7.3, and IBM PowerVM VIOS 4.1 that could allow a local attacker to gain elevated privileges. The flaw is triggered when a locally authenticated, low-privileged user causes attacker-controlled format directives to reach a formatting function, corrupting process memory on the affected system. Successful exploitation has high impact on confidentiality, integrity, and availability per the CVSS vector, which for a local privilege escalation on AIX/VIOS effectively means root-level compromise of the LPAR or Virtual I/O Server. Only customers running the stated releases, AIX 7.2, AIX 7.3, or PowerVM VIOS 4.1, are in scope; other releases are not listed as affected. There is currently no evidence of exploitation: the flaw is not in CISA KEV, EPSS is about 0.1% (1st percentile), and no public proof-of-concept is known.

Do: Monitor IBM PSIRT for the security bulletin tied to CVE-2026-16821 and apply the interim fix or service update for AIX 7.2, AIX 7.3, and VIOS 4.1 as soon as it is published, confirming current fileset levels with lslpp before and after patching. Until systems are patched, restrict local logins on affected LPARs and Virtual I/O Servers to trusted users, since exploitation requires only a local low-privilege account and no user interaction.

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.