Description
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.
Published: 2026-06-11
Score: 8.8 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

IBM i Release5770-SS1 PTF Number(s)PTF Download Link(s)7.6SJ09689 SJ09666 SJ10017 SJ09859 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09689 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09666 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10017 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09859 7.5SJ09688 SJ09665 SJ09699 SJ10015 SJ09855 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09688 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09665 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09699 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10015 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09855 7.4SJ09690 SJ09664 SJ09701 SJ10028 SJ09851 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09690 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09664 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09701 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10028 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09851 7.3SJ09691 SJ09663 SJ10018 SJ09837 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09691 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09663 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10018 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09837 IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 11 Jun 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 11 Jun 2026 15:30:00 +0000

Type Values Removed Values Added
Description IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.
Title IBM i is Affected by Privilege Escalation []
First Time appeared Ibm
Ibm i
Weaknesses CWE-427
CPEs cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm i
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Ibm I
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-06-11T15:30:41.132Z

Reserved: 2026-05-05T14:09:09.453Z

Link: CVE-2026-7870

cve-icon Vulnrichment

Updated: 2026-06-11T15:30:37.662Z

cve-icon NVD

Status : Received

Published: 2026-06-11T16:16:25.220

Modified: 2026-06-11T16:16:25.220

Link: CVE-2026-7870

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-427

    Uncontrolled Search Path Element