Vulnerability intelligence
CVE-2026-96119
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application.
CVSS Score
9.9
Critical
EPSS — Exploit Probability
—
Awaiting FIRST.org data · checked 2026-10-13
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Patch available
Vendor fix published
1 article across 1 outlet · first covered Oct 13, 2026 · latest Oct 13, 2026
Coverage timeline
-
IBM Patches Critical Maximo AI Flaw Allowing Unauthenticated Remote Code Executionsecurityonline.info · Oct 13, 2026