Improper Authentication Vulnerability in IBM i Products
CVE-2026-17099

7.3HIGH

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
13 August 2026

What is CVE-2026-17099?

A vulnerability in IBM i versions 7.6, 7.5, 7.4, and 7.3 can enable a remote attacker to exploit improper authentication mechanisms, potentially allowing them to gain access to sensitive information that should be protected. This issue emphasizes the need for robust authentication protocols to safeguard against unauthorized access.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7283292
vendor-advisorypatch

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.