CVE-2026-17109

MediumCVSS 4.3

Published: 12/08/2026(UTC)Updated: 13/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

24th percentile - higher than 24% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection.

Risk Assessment

An attacker could alter the behavior of system commands, potentially leading to unauthorized actions or privilege escalation.

Recommendation

Apply IBM i patches and validate all input before using it in commands.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection.