
Security Bulletin: IBM i is Affected by a Denial of Service Vulnerability [CVE-2026-6936]
Security Bulletin
CVEID: CVE-2026-6936
DESCRIPTION: IBM i is vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler. An authenticated attacker could exploit this vulnerability by compiling specially crafted source code containing a specific combination of statements.
CWE: CWE-674: Uncontrolled Recursion
CVSS Source: IBM
CVSS Base score: 6.5
CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
IBM i Release Fixing PTF
7.6 MJ09365
7.5 MJ09335
7.4 MJ09334
7.3 MJ09332
English





