Unauthorized Information Exposure in IBM i Printing System
CVE-2026-77153

4.8MEDIUM

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
8 November 2026

What is CVE-2026-77153?

A vulnerability in the Host-Based Printer Subsystem of IBM i versions 7.6, 7.5, 7.4, and 7.3 allows remote attackers without authentication to gain access to sensitive information. The lack of an authorization check means that unauthorized individuals could exploit this flaw to print files and access data they should not be able to view, posing a significant risk to informational privacy and system security.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7294253
vendor-advisorypatch

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.