IBM i Remote Manipulation Vulnerability in Multiple Versions
CVE-2026-17275

3.7LOW

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
16 October 2026

What is CVE-2026-17275?

A vulnerability exists in IBM i versions 7.3, 7.4, 7.5, and 7.6 that may enable remote attackers to manipulate distributed transactions. This flaw arises from improper validation of transaction identifiers supplied by an attacker, which could lead to unauthorized actions within the system. Organizations using these versions should ensure they are aware of this vulnerability and apply the necessary patches as detailed in the vendor's advisory.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7292222
vendor-advisorypatch

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.