CVE-2026-17275

Published: Oct 16, 2026Modified: Oct 23, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.

Affected (4)

Products: Ibm: I

Ibm

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm I	Version 7.3
Ibm I	Version 7.4
Ibm I	Version 7.5
Ibm I	Version 7.6

Related CWEs

CWE-285

Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References (1)

https://www.ibm.com/support/pages/node/7292222

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.