Privilege Escalation Vulnerability in IBM i by IBM
CVE-2026-16987

8.8HIGH

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
13 August 2026

What is CVE-2026-16987?

A local attacker can exploit a vulnerability in IBM i to gain elevated privileges due to inadequate validation of the LANG environment variable. This flaw affects multiple versions, allowing unauthorized users to potentially execute commands with elevated permissions, posing significant risks to system integrity and security. Users are advised to apply the latest patches provided by IBM to mitigate these security risks.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7283296
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.