Description
IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.
Published: 2026-10-16
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Privilege Escalation
Action: Immediate Patch
AI Analysis

Impact

The vulnerability allows an authenticated attacker to elevate their privilege to QSECOFR or Root authority, effectively granting full control over the IBM i system. This elevation can be used to modify system configurations, access sensitive data, or execute arbitrary code with unrestricted permissions. The weakness is a classic privilege management flaw (CWE‑269).

Affected Systems

IBM i versions 7.3, 7.4, 7.5, and 7.6 are affected. Users running these operating system releases are at risk if they possess valid user credentials.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity level. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The vulnerability requires authentication, so a local or remote user with valid credentials can exploit it. The attack vector is inferred to be from an authenticated user, and the attacker can naturally take advantage of the privilege escalation to perform privileged operations.

Generated by OpenCVE AI on October 16, 2026 at 20:16 UTC.

Remediation

Vendor Solution

IBM i Release5770-SS1  PTF Number(s)PTF Download Link(s)7.6SJ11832 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11832 7.5SJ11775 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11775 7.4SJ11833 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11833 7.3SJ11841 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11841 IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.


OpenCVE Recommended Actions

  • Apply the IBM i Release5770-SS1 patches (PTF SJ11832 for 7.6, SJ11775 for 7.5, SJ11833 for 7.4, SJ11841 for 7.3) provided by IBM.
  • Upgrade to a supported and fixed IBM i release that includes the fix for vulnerable privilege management.
  • Limit the number of users granted QSECOFR or Root authority and enforce strict role‑based access controls to reduce the impact of privilege escalation.

Generated by OpenCVE AI on October 16, 2026 at 20:16 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 16 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
Description IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.
Title IBM i is Affected By An Improper Privilege Management Vulnerability
First Time appeared Ibm
Ibm i
Weaknesses CWE-269
CPEs cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm i
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-10-17T03:55:58.842Z

Reserved: 2026-09-29T19:01:55.929Z

Link: CVE-2026-102917

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-16T19:17:01.273

Modified: 2026-10-17T04:16:47.277

Link: CVE-2026-102917

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-17T20:30:13Z

Weaknesses
  • CWE-269

    Improper Privilege Management