Remote Code Execution Vulnerability in IBM i Software
CVE-2026-17417

8.8HIGH

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
12 August 2026

What is CVE-2026-17417?

IBM i versions 7.6, 7.5, 7.4, and 7.3 are susceptible to a security weakness that could enable a remote authenticated adversary to execute arbitrary commands on the server. This issue arises from improper handling of shell metacharacters, which may bypass security measures. It is crucial for users to apply the latest patches provided by IBM to mitigate this security risk and protect their systems from potential exploitation.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7283275
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.