Live › vulnerability › CVE-2026-107674
Go to dashboardIBM i versions 7.3 through 7.6 have a flaw in Digital Certificate Manager for System TLS that affects applications creating secure network connections. An attacker can deny service by stopping a service from starting, or force applications to fall back to non-secure connections.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
IBM i systems on releases 7.3, 7.4, 7.5 or 7.6 that run applications using System TLS through Digital Certificate Manager to open secure network connections are in scope. Teams on other IBM i releases or without System TLS-dependent services can likely skip it. The sources do not say which configurations trigger the flaw.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ibm i | vendor | = 7.3 | – |
| ibm i | vendor | = 7.4 | – |
| ibm i | vendor | = 7.5 | – |
| ibm i | vendor | = 7.6 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.
This page as .md · .json · in your agent: get_signal("CVE-2026-107674")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.