CVE-2026-7870

Analyzed Analyzed - Analysis Complete

IBM i Unqualified Library Call Privilege Escalation

Publication date: 2026-06-11

Last updated on: 2026-06-16

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-11

Last Modified

2026-06-16

Generated

2026-07-03

AI Q&A

2026-06-11

EPSS Evaluated

2026-07-01

NVD

CVE-2026-7870

EUVD

EUVD-2026-36250

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.3
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-427	The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

Executive Summary

CVE-2026-7870 is a vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6 caused by an unqualified library call. This flaw allows a malicious actor to execute user-controlled code with administrator privileges by exploiting the way the system searches for libraries.

Impact Analysis

This vulnerability can have a severe impact as it allows an attacker to gain elevated privileges on the affected IBM i systems. With administrator privileges, the attacker can execute arbitrary code, potentially leading to full system compromise, unauthorized access to sensitive data, and disruption of services.

Compliance Impact

The provided information does not specify how this vulnerability directly affects compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

To mitigate this vulnerability, you should apply the Program Temporary Fixes (PTFs) released by IBM for each affected version of IBM i (7.3, 7.4, 7.5, and 7.6).

There are no workarounds currently available, so applying the official fixes is the only recommended action.

If you are running unsupported versions of IBM i, you should upgrade to a supported release to address this issue.

Hi! I’m here to help you understand CVE-2026-7870. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70