CVE Catalog
CVE-2026-16860
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk0.46%
38th percentile - higher than 38% of all known CVEs
Summary
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element.
Risk Assessment
The risk for the organization is remote code execution, which can lead to compromise of the IBM i system.
Recommendation
It is recommended to apply security patches provided by IBM and review search path configurations in the system.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element.