CVE-2026-17419Disclosure(ibm / i)

LOWCVSS 6.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command.

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • i

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
Products
i

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-08-12: 3Technical Details · 2026-08-12: 308-12
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-17419 IBM i SQL Injection Vulnerability Allows Table Modification https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-17419

    Post summary

    The text identifies CVE‑2026‑17419 as an IBM i SQL injection that could modify tables, but it provides no exploit code, patch details, or active exploitation evidence.

    00000129
    4.1K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-17419 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL comman… https://www.cve.org/CVERecord?id=CVE-2026-17419 ----- Traducción: CVE-2026-17419 IBM… http://infoflow.cloud`

    Post summary

    The tweet references CVE-2026-17419, noting it allows a remote authenticated attacker to modify SQL tables because of improper neutralization of special elements in an SQL command, but provides no PoC, exploit, patch, or evidence of active exploitation.

    0000030
    97 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-17419 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL comman… https://www.cve.org/CVERecord?id=CVE-2026-17419

    Post summary

    CVE-2026-17419 is disclosed as a vulnerability in IBM i that permits a remote authenticated attacker to modify SQL tables through improper neutralization of special elements in SQL commands.

    000001.7K
    57.9K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appibmi---

Explore more