IBM i PTF Guide, Volume 28, Number 31

September 14, 2026 Doug Bidwell

Big Blue is dumping a bunch of security vulnerabilities into your lap again, this time just ahead of the Labor Day holiday in the United States. We did not publish that week because we were on holiday, so we are playing catch up just like you now will be.

Let’s start with the Security Bulletin: IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [CVE-2026-18175, CVE-2026-18221], which you can find HERE. Affected Products and Versions:

IBM i Release	5770-SS1 	PTF Number(s)
7.6			        SJ11231
			        SJ11230
7.5			        SJ11232
			        SJ11233
7.4			        SJ11262
			        SJ11261	
7.3			        SJ11234
			        SJ11235

Security Bulletin: IBM i is Affected By Buffer Overflow Vulnerability [CVE-2026-18341], can be viewed HERE. Affected Products and Versions:

IBM i Release	5770-999 	PTF Number(s)
7.6			        MJ11326
7.5			        MJ11327
7.4			        MJ11328
7.3			        MJ11329

Security Bulletin: IBM i is Affected By Denial of Service Vulnerability [CVE-2026-17255], which you can read HERE. Affected Products and Versions:

IBM i Release	5770-999	PTF Number(s)
7.6				MJ11322
7.5				MJ11323
7.4				MJ11324
7.3				MJ11325

Security Bulletin: IBM i is Affected By Denial of Service Vulnerability in Save Restore [CVE-2026-18078], is HERE. Affected Products and Versions:

IBM i Release	5770-SS1 	PTF Number(s)
7.6			        SJ11369
7.5			        SJ11368
7.4			        SJ11367
7.3			        SJ11366

Security Bulletin: IBM i is Affected By a Denial of Service in HTTP Server [CVE-2026-17272], can be seen HERE. Affected Products and Versions:

IBM i Release	5770-DG1 	PTF Number(s)
7.6			        SJ10845
7.5			        SJ11209
7.4			        SJ10843
7.3			        SJ10842

Security Bulletin: IBM i is Affected By Sensitive Information Exposure Vulnerability in PASE [CVE-2026-18887], which you can see HERE. Affected Products and Versions:

IBM i Release	5770-999 	PTF Number(s)
7.6			        MJ11365
7.5			        MJ11364
7.4			        MJ11363
7.3			        MJ11362

Security Bulletin: IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [CVE-2026-17470, CVE-2026-17469], is available HERE. Affected Products and Versions:

IBM i Release	5770-TC1 	PTF Number(s)
7.6			        SJ11300
7.5			        SJ11301
7.4			        SJ11302
7.3			        SJ11303

Security Bulletin: IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH [CVE-2026-18858], is HERE. Affected Products and Versions:

IBM i Release	5733-SC1 	PTF Number(s)
7.6			        SJ11404
7.5			        SJ11405

Security PTF Enhancements Can Prevent Connections from Older Versions of IBM i Access Client Solutions Windows Application Package Drivers, can be see HERE. After applying the following security PTF clients using the drivers supplied by IBM i Access Client Solutions Windows Application Package versions older than 1.1.0.28 will fail to establish a connection to the IBM i Host Servers. Affected Products and Versions:

IBM i release	Product Number		PTF number	
7.6	        5770SS1		        SJ11101
7.5	        5770SS1		        SJ11102
7.4	        5770SS1		        SJ11103

Security Bulletin: IBM Db2 Mirror for i is affected by multiple vulnerabilities [CVE-2026-18567, CVE-2026-16660, CVE-2026-17483], which you can read HERE. Affected Products and Versions:

IBM i Release	5733-SS1 	PTF Number(s)
7.6			        SJ11151
			        SJ11195
			        SJ11205
7.5			        SJ11152 
			        SJ11194
			        SJ11206
7.4			        SJ11153
			        SJ11193
			        SJ11207

Security Bulletin: IBM i is Affected By An Incorrect Authorization Vulnerability [CVE-2026-16941], and can be read HERE. Affected Products and Versions:

IBM i Release	5770-SS1 	PTF Number(s)
7.6			        SJ11201
7.5			        SJ11210
7.4			        SJ11211

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Debug Server, is available HERE. Affected Products and Versions:

IBM i Release	5770-SS1 	PTF Number(s)
7.6			        SJ11305
7.5			        SJ11306
7.4			        SJ11307
7.3			        SJ11308

Security Bulletin: IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service [CVE-2026-16892], is HERE. Affected Products and Versions:

IBM i Release	5770-SS1 	PTF Number(s)
7.6			        SJ11089
7.5			        SJ11090
7.4			        SJ11091
7.3			        SJ11092

Security Bulletin: IBM i is Affected By Cryptographic Algorithm Weakness in DCM [CVE-2026-16693], which can be found HERE. Affected Products and Versions:

IBM i Release	5770-SS1 Option 34	PTF Number(s)
7.6				        SJ11156
7.5				        SJ11159
7.4				        SJ11158
7.3				        SJ11157

Finally, Security Bulletin: IBM i is Affected By Denial of Service Vulnerabilities in NFS [CVE-2026-17057, CVE-2026-17207], can be reviewed HERE. Affected Products and Versions:

IBM i Release	5770-SS1 	PTF Number(s)
7.6				SJ11320
7.5			        SJ11319
7.4			        SJ11318
7.3			        SJ11317

OK, you can exhale now. That was a lot.

Here is the rundown of PTF Groups by IBM i release level since we last published:

PTF Groups 7.6:

HIPERs – High Impact Pervasive
Security
Temporary Storage PTFs
PowerHA Tools for IBM i – Full System FlashCopy (FSFC)
PowerHA Tools for IBM i – Full System Replication (FSR)

PTF Groups 7.5:

HIPERs – High Impact Pervasive
Security
Temporary Storage PTFs
PowerHA Tools for IBM i – Full System FlashCopy (FSFC)
PowerHA Tools for IBM i – Full System Replication (FSR)

PTF Groups 7.4:

HIPERs – High Impact Pervasive
Security
Temporary Storage PTFs
PowerHA Tools for IBM i – Full System FlashCopy (FSFC)
PowerHA Tools for IBM i – Full System Replication (FSR)

PTF Groups 7.3:

HIPERs – High Impact Pervasive
Security
Temporary Storage PTFs
PowerHA Tools for IBM i – Full System FlashCopy (FSFC)
PowerHA Tools for IBM i – Full System Replication (FSR)

PTF Groups 7.2:

None

Tip O’ The Week: This may or may not resolve your problem, for some, it worked!!

Unable to obtain CONSOLE or VIRTUAL Control Panel after Updating to ACS version 1.1.9.15

Close all the ACS windows and
Go to: C:\Users\Administrator\Documents\IBM\iAccessClient\Private\ and then delete the folder.Administrator and then
Restart ACS.

Submitted by our friends at TRACnet. . . .

New (or Updated) links added to the ‘Links’ tab in The Guide this week:

None

New (or Updated) links added to the ‘QMGtools’ tab in The Guide this week:

None

New (or Updated) links added to the ‘ACS_NAV’ tab in The Guide this week:

None

New (or Updated) links added to the ‘Prtr Links’ tab in The Guide this week:

None

New (or Updated) links Redbooks added this week:

None

New (or Updated) stuff added to REF tab in The Guide this week:

None

New (or Updated) links in the TAPE tab in The Guide this week:

None

New (or Updated) links in the WAS tab in The Guide this week:

None

The Guide at a glance: There were new defectives the week of 09/04/26. Defective PTF rundown – the latest defective for each release. Click on the Defective PTF link for your release in the Guide:

	Defect		Defective	APAR		Fixing
	Date		PTF				PTF
	--------	--------	---------	-----------------------	
7.6	08/27/26	SJ10029	        DT498782	SJ11181  (When available)(read the recommendations)
			SJ09530					  Read the cover letter-prerequisites!		
			SJ11163
			SJ10693
			SJ09082
			SJ08953
			SJ08707
			SJ08574 
			SJ08426

7.5	08/27/26	SJ10844	        DT498782	SJ11182  (When available)(read the recommendations)
			SJ10692					  Read the cover letter-prerequisites!
			SJ09231						
			SJ08956
			SJ08706
			SJ08575
			SJ08425

7.4	08/27/26	SJ08675	        DT498782	SJ11183   Same as above, Please read the Cover letter  
			SJ10873					 (When available)(read the recommendations)
			SJ09230					  Read the cover letter-prerequisites!
			SJ08957
			SJ08705
			SJ08576
			SJ08424

7.3	04/10/26	SJ08674	        DT467722	SJ09200  (When available)(read the recommendations)

Be sure to access the link in The Guide for further details.

Below is the usual archive of the IBM i PTF Guide to help you work through the PTFs in chronological order:

September 4, 2026: Volume 28, Number 31

August 29, 2026: Volume 28, Number 30

August 22, 2026: Volume 28, Number 29

August 15, 2026: Volume 28, Number 28

August 8, 2026: Volume 28, Number 27

August 1, 2026: Volume 28, Number 26

July 26, 2026: Volume 28, Number 25

July 18, 2026: Volume 28, Number 24

July 11, 2026: Volume 28, Number 23

July 4, 2026: Volume 28, Number 22