CVE-2026-17487
Analyzed Analyzed - Analysis Complete

User Profile Enumeration in IBM i

Publication date: 2026-10-13

Last updated on: 2026-10-14

Assigner: IBM Corporation

Description
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-13
EPSS Evaluated
2026-10-18
NVD
CVE-2026-17487
EUVD
EUVD-2026-98167

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ibm i From 7.3 (inc) to 7.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in IBM i systems allows a remote attacker to guess valid user profiles by exploiting distinct error codes returned during the sign-on process. It affects IBM i versions 7.3 through 7.6 and is classified under CWE-200 for exposure of sensitive information.

Detection Guidance

Monitor sign-on processes for distinct error codes indicating valid usernames. Check IBM i logs for repeated failed login attempts with varying error messages. Use network traffic analysis tools to inspect authentication responses for IBM i systems.

Impact Analysis

An attacker could use this flaw to enumerate user profiles, potentially gaining knowledge of valid accounts. This could facilitate further attacks like brute force attempts or social engineering targeting specific users.

Compliance Impact

This vulnerability may violate compliance requirements that mandate protection of user account information, such as GDPR's data protection principles or HIPAA's safeguards for protected health information access controls.

Mitigation Strategies

Apply IBM-provided PTFs (MJ11633, MJ11634, MJ11635, MJ11636) for your IBM i version. Disable Dedicated Service Tools (DST) / System Service Tools (SST) if not required. Restrict remote access to IBM i administrative interfaces.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17487. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart