Is CVE-2026-107674 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-107674?

CVE-2026-107674 has a CVSS v3 severity of MEDIUM (5.1).

Back

CVE-2026-107674

Description

IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.