CVE Catalog

CVE-2026-17268

MediumCVSS 6.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.22%

13th percentile - higher than 13% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of a session token.

Risk Assessment

An attacker could gain unauthorized access to system functions, potentially leading to confidentiality and integrity breaches.

Recommendation

Install IBM i security updates and monitor sessions for unusual activity.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of a session token.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS