Findings

CVE-2026-81858

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.

Published Oct 13, 2026 · updated Oct 14, 2026 · ibm i

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 13, 2026 · NIST NVD

    Detected

    IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.

  2. Oct 14, 2026 · NIST NVD

    Updated

    IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.

Affected

  • cpe ibm/iversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-81858

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-81858

    30-day exploitation probability 0.5%

    first.org
  • NIST NVDVulnerability recordCVE-2026-81858

    IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.

    nvd.nist.gov

References