CriticalCritical vulnerability
CVE-2026-96119 (CVSS 9.9)
NVD · officialPublished Oct 13, 2026Risk 50/100
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application.
Technical details
CVSS
9.9
AV:NetworkAC:LowPR:LowUI:NoneC:HighI:HighA:High
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source