Authentication Bypass Vulnerability in IBM i Products
CVE-2026-17488

4.3MEDIUM

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
16 October 2026

What is CVE-2026-17488?

A remote authenticated attacker may exploit a flaw in IBM i versions 7.3, 7.4, 7.5, and 7.6 to bypass security restrictions due to improper authentication handling. This vulnerability could potentially allow unauthorized access to restricted functionalities, posing significant security risks for organizations utilizing affected versions. Users are urged to review the vendor's advisory for mitigation steps and patches.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7292270
vendor-advisorypatch

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.