CVE-2026-6936

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-6936", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-04-23T19:11:07.049Z", "datePublished": "2026-05-27T13:10:46.314Z", "dateUpdated": "2026-05-27T15:30:14.915Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-05-27T13:10:46.314Z"}, "title": "IBM i is Affected by a Denial of Service Vulnerability []", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-674", "description": "CWE-674 Uncontrolled Recursion", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6", "lessThanOrEqual": "11.5.9", "versionType": "semver"}, {"status": "affected", "version": "7.5", "lessThanOrEqual": "12.1.4", "versionType": "semver"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}], "cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler. An authenticated attacker could exploit this vulnerability by compiling specially crafted source code containing a specific combination of statements.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler. An authenticated attacker could exploit this vulnerability by compiling specially crafted source code containing a specific combination of statements.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7272908", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}}], "solutions": [{"lang": "en", "value": "IBM i Release5770-999\nPTF Number(s)PTF Download Link(s)7.6MJ09365 https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09365 7.5MJ09335 https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09335 7.4MJ09334 https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09334 7.3MJ09332 https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09332 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p></p><div><table><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-999<br>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>MJ09365</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09365\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09365</a></td></tr><tr><td>7.5</td><td>MJ09335</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09335\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09335</a></td></tr><tr><td>7.4</td><td>MJ09334</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09334\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09334</a></td></tr><tr><td>7.3</td><td>MJ09332</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09332\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09332</a></td></tr></tbody></table></div><p>IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>"}]}], "x_generator": {"engine": "ibm-cvegen"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-27T15:30:02.482494Z", "id": "CVE-2026-6936", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-27T15:30:14.915Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-6936", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-27T15:30:02.482494Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-27T15:30:10.816Z"}}], "cna": {"title": "IBM i is Affected by a Denial of Service Vulnerability []", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6", "versionType": "semver", "lessThanOrEqual": "11.5.9"}, {"status": "affected", "version": "7.5", "versionType": "semver", "lessThanOrEqual": "12.1.4"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}]}], "solutions": [{"lang": "en", "value": "IBM i Release5770-999\nPTF Number(s)PTF Download Link(s)7.6MJ09365 https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09365 7.5MJ09335 https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09335 7.4MJ09334 https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09334 7.3MJ09332 https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09332 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "value": "<p></p><div><table><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-999<br>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>MJ09365</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09365\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09365</a></td></tr><tr><td>7.5</td><td>MJ09335</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09335\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09335</a></td></tr><tr><td>7.4</td><td>MJ09334</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09334\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09334</a></td></tr><tr><td>7.3</td><td>MJ09332</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09332\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=MJ09332</a></td></tr></tbody></table></div><p>IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7272908", "tags": ["vendor-advisory", "patch"]}], "x_generator": {"engine": "ibm-cvegen"}, "descriptions": [{"lang": "en", "value": "IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler. An authenticated attacker could exploit this vulnerability by compiling specially crafted source code containing a specific combination of statements.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler. An authenticated attacker could exploit this vulnerability by compiling specially crafted source code containing a specific combination of statements.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-674", "description": "CWE-674 Uncontrolled Recursion"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-05-27T13:10:46.314Z"}}}, "cveMetadata": {"cveId": "CVE-2026-6936", "state": "PUBLISHED", "dateUpdated": "2026-05-27T15:30:14.915Z", "dateReserved": "2026-04-23T19:11:07.049Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-05-27T13:10:46.314Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"], "product": "i", "vendor": "IBM", "versions": [{"lessThanOrEqual": "11.5.9", "status": "affected", "version": "7.6", "versionType": "semver"}, {"lessThanOrEqual": "12.1.4", "status": "affected", "version": "7.5", "versionType": "semver"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:i:*:*:*:*:*:*:*:*", "matchCriteriaId": "46DEA5F3-B160-471F-8C4C-0E8338EDEDA5", "versionEndIncluding": "7.6", "versionStartIncluding": "7.3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*", "matchCriteriaId": "C684FC45-C9BA-4EF0-BD06-BB289450DD21", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler. An authenticated attacker could exploit this vulnerability by compiling specially crafted source code containing a specific combination of statements."}, {"lang": "es", "value": "IBM i 7.6, 7.5, 7.4 y 7.3 es vulnerable a un ataque de denegaci\u00f3n de servicio debido a una recursi\u00f3n incontrolada en el compilador de Integrated Language Environment (ILE). Un atacante autenticado podr\u00eda explotar esta vulnerabilidad al compilar c\u00f3digo fuente especialmente dise\u00f1ado que contenga una combinaci\u00f3n espec\u00edfica de sentencias."}], "id": "CVE-2026-6936", "lastModified": "2026-10-14T20:10:00.190", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6936", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-27T15:30:02.482494Z", "version": "2.0.3"}}]}, "published": "2026-05-27T14:17:34.923", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7272908"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-674"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.6,11.5.9]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.5,12.1.4]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.3"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "i", "vendor": "ibm"}], "created": "2026-05-27T18:00:15.744579+00:00", "updated": "2026-05-28T04:45:07.158532+00:00", "vendors": ["ibm", "ibm$PRODUCT$i"]}