CVE-2026-1376

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1376", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-01-23T18:15:46.717Z", "datePublished": "2026-03-17T21:53:44.108Z", "dateUpdated": "2026-03-18T20:01:11.954Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-03-17T21:53:44.108Z"}, "title": "IBM i Denial of Service", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-770", "description": "CWE-770 Allocation of Resources Without Limits or Throttling", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6"}], "cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM i 7.6 could allow a remote attacker to cause a denial of service using failed authentication connections due to improper allocation of resources.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM i 7.6 could allow a remote attacker to cause a denial of service using failed authentication connections due to improper allocation of resources.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7266422", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}}], "solutions": [{"lang": "en", "value": "Remediation/Fixes IBM strongly recommends addressing the vulnerability now. IBM i Release 5733-SC1 PTF Number(s) PTF Download Link(s) 7.6 SJ09012 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09012 IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Remediation/Fixes IBM strongly recommends addressing the vulnerability now. IBM i Release 5733-SC1 PTF Number(s) PTF Download Link(s) 7.6 SJ09012 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09012 IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>"}]}], "x_generator": {"engine": "ibm-cvegen"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-18T20:01:00.522101Z", "id": "CVE-2026-1376", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-18T20:01:11.954Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-1376", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-18T20:01:00.522101Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-18T20:01:06.504Z"}}], "cna": {"title": "IBM i Denial of Service", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6"}]}], "solutions": [{"lang": "en", "value": "Remediation/Fixes IBM strongly recommends addressing the vulnerability now. IBM i Release 5733-SC1 PTF Number(s) PTF Download Link(s) 7.6 SJ09012 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09012 IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "value": "<p>Remediation/Fixes IBM strongly recommends addressing the vulnerability now. IBM i Release 5733-SC1 PTF Number(s) PTF Download Link(s) 7.6 SJ09012 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09012 IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7266422", "tags": ["vendor-advisory", "patch"]}], "x_generator": {"engine": "ibm-cvegen"}, "descriptions": [{"lang": "en", "value": "IBM i 7.6 could allow a remote attacker to cause a denial of service using failed authentication connections due to improper allocation of resources.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM i 7.6 could allow a remote attacker to cause a denial of service using failed authentication connections due to improper allocation of resources.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-770", "description": "CWE-770 Allocation of Resources Without Limits or Throttling"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-03-17T21:53:44.108Z"}}}, "cveMetadata": {"cveId": "CVE-2026-1376", "state": "PUBLISHED", "dateUpdated": "2026-03-18T20:01:11.954Z", "dateReserved": "2026-01-23T18:15:46.717Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-03-17T21:53:44.108Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*"], "product": "i", "vendor": "IBM", "versions": [{"status": "affected", "version": "7.6"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ibm:i:7.6:*:*:*:*:*:*:*", "matchCriteriaId": "AFFF96C2-7E0F-4DF9-AF51-3EE357D51095", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM i 7.6 could allow a remote attacker to cause a denial of service using failed authentication connections due to improper allocation of resources."}, {"lang": "es", "value": "IBM i 7.6 podr\u00eda permitir a un atacante remoto causar una denegaci\u00f3n de servicio utilizando conexiones de autenticaci\u00f3n fallidas debido a una asignaci\u00f3n incorrecta de recursos."}], "id": "CVE-2026-1376", "lastModified": "2026-06-17T10:15:40.647", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-1376", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-18T20:01:00.522101Z", "version": "2.0.3"}}]}, "published": "2026-03-17T22:16:14.287", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7266422"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-770"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.6"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "i", "source": "cna", "vendor": "IBM"}, "product": "i", "vendor": "ibm"}], "analysis": {"en": {"generated_at": "2026-03-19T15:32:11.363007+00:00", "value": {"mitigation_remediation": ["Apply the IBM i Release 5733\u2011SC1 PTF PTF #SJ09012 (download from https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09012).", "Upgrade to a supported IBM i version that includes the fix if you are running an unsupported or older version.", "Verify that the applied patch covers all relevant components by checking the fix coverage details.", "Monitor system health and logs for unexpected authentication failures or resource usage spikes after patching."], "summary": {"action": "Patch Now", "impact": "Denial of Service"}, "threat_synthesis": {"affected_systems": "Affected product is IBM i version 7.6. The vulnerability is present in the IBM i operating system and is addressed specifically by the PTF\u202fSJ09012 (IBM i Release 5733\u2011SC1) and by any supported IBM i version that incorporates that fix.", "description_and_impact": "IBM i 7.6 may allow a remote attacker to cause a denial of service by exploiting failed authentication connections that result in improper allocation of resources. The vulnerability can interrupt service availability but does not directly compromise confidentiality or integrity.", "risk_and_exploitability": "The CVSS score of 7.5 indicates a high severity. The EPSS score under 1% suggests the likelihood of exploitation is low. The vulnerability is not listed in the CISA KEV catalog. Attackers can target affected instances over the network; the exploit requires only remote authentication failure, making the attack path straightforward."}}}}, "created": "2026-03-18T10:42:41.889261+00:00", "updated": "2026-03-24T10:54:30.628307+00:00", "vendors": ["ibm", "ibm$PRODUCT$i"]}