CVE-2026-17029 - Vulnerability Details - OpenCVE

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out-of-bounds write.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Ibm	I

Configuration 1 [-]

cpe:2.3:a:ibm:i:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7283285

History

Mon, 17 Aug 2026 16:00:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:ibm:i::::::::

Fri, 14 Aug 2026 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 13 Aug 2026 20:15:00 +0000

Type	Values Removed	Values Added
Description		IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out-of-bounds write.
Title		IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
First Time appeared		Ibm Ibm i
Weaknesses		CWE-787
CPEs		cpe:2.3:a:ibm:i:7.3.0:::::::* cpe:2.3:a:ibm:i:7.3:::::::* cpe:2.3:a:ibm:i:7.4.0:::::::* cpe:2.3:a:ibm:i:7.4:::::::* cpe:2.3:a:ibm:i:7.5.0:::::::* cpe:2.3:a:ibm:i:7.5:::::::* cpe:2.3:a:ibm:i:7.6.0:::::::* cpe:2.3:a:ibm:i:7.6:::::::*
Vendors & Products		Ibm Ibm i
References		https://www.ibm.com/support/pages/node/7283285
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-08-13T19:54:29.760Z

Updated: 2026-08-14T12:39:38.065Z

Reserved: 2026-07-24T11:19:51.070Z

Link: CVE-2026-17029

Vulnrichment

Updated: 2026-08-14T12:39:34.512Z

NVD

Status : Analyzed

Published: 2026-08-13T20:17:17.840

Modified: 2026-08-17T15:39:55.583

Link: CVE-2026-17029

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-17029", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-07-24T11:19:51.070Z", "datePublished": "2026-08-13T19:54:29.760Z", "dateUpdated": "2026-08-14T12:39:38.065Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-08-13T19:54:29.760Z"}, "title": "IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}], "cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out-of-bounds write.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out-of-bounds write.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7283285", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\nIBM i Release5770-JV1\nPTF Number(s)PTF Download Link(s)7.6SJ11036\nSJ11072\nSJ11082\nSJ11088 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11036 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11072 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11082 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11088 7.5SJ11068\nSJ11073\nSJ11070\nSJ11077\nSJ11087\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11068 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11073 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11070 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11077 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11087 7.4SJ11071\nSJ11069\nSJ11076\nSJ11086\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11071 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11069 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11076 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11086 7.3SJ11067\nSJ11075\nSJ11085\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11067 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11075 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11085 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p><strong>IBM strongly recommends addressing the vulnerability now.</strong></p><div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-JV1<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ11036<br/>SJ11072<br/>SJ11082<br/>SJ11088</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11036\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11036</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11072\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11072</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11082\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11082</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11088\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11088</a></td></tr><tr><td>7.5</td><td>SJ11068<br/>SJ11073<br/>SJ11070<br/>SJ11077<br/>SJ11087<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11068\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11068</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11073\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11073</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11070\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11070</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11077\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11077</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11087\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11087</a></td></tr><tr><td>7.4</td><td>SJ11071<br/>SJ11069<br/>SJ11076<br/>SJ11086<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11071\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11071</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11069\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11069</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11076\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11076</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11086\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11086</a></td></tr><tr><td>7.3</td><td>SJ11067<br/>SJ11075<br/>SJ11085<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11067\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11067</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11075\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11075</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11085\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11085</a></td></tr></tbody></table></div><p>IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-14T03:56:11.992272Z", "id": "CVE-2026-17029", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-14T12:39:38.065Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-17029", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-14T03:56:11.992272Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-14T12:39:34.512Z"}}], "cna": {"title": "IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}]}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\nIBM i Release5770-JV1\nPTF Number(s)PTF Download Link(s)7.6SJ11036\nSJ11072\nSJ11082\nSJ11088 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11036 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11072 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11082 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11088 7.5SJ11068\nSJ11073\nSJ11070\nSJ11077\nSJ11087\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11068 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11073 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11070 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11077 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11087 7.4SJ11071\nSJ11069\nSJ11076\nSJ11086\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11071 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11069 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11076 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11086 7.3SJ11067\nSJ11075\nSJ11085\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11067 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11075 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11085 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "value": "<p><strong>IBM strongly recommends addressing the vulnerability now.</strong></p><div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-JV1<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ11036<br/>SJ11072<br/>SJ11082<br/>SJ11088</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11036\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11036</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11072\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11072</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11082\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11082</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11088\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11088</a></td></tr><tr><td>7.5</td><td>SJ11068<br/>SJ11073<br/>SJ11070<br/>SJ11077<br/>SJ11087<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11068\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11068</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11073\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11073</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11070\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11070</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11077\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11077</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11087\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11087</a></td></tr><tr><td>7.4</td><td>SJ11071<br/>SJ11069<br/>SJ11076<br/>SJ11086<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11071\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11071</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11069\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11069</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11076\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11076</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11086\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11086</a></td></tr><tr><td>7.3</td><td>SJ11067<br/>SJ11075<br/>SJ11085<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11067\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11067</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11075\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11075</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11085\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11085</a></td></tr></tbody></table></div><p>IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7283285", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out-of-bounds write.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out-of-bounds write.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-08-13T19:54:29.760Z"}}}, "cveMetadata": {"cveId": "CVE-2026-17029", "state": "PUBLISHED", "dateUpdated": "2026-08-14T12:39:38.065Z", "dateReserved": "2026-07-24T11:19:51.070Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-08-13T19:54:29.760Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}