Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-96119

IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fix or patch referenced
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: no
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application.

Affected versions

  • IBM i

    7.6, 7.5, 7.4, 7.3

References 1

ibm.com