CVE-2026-7870
Received Received - Intake
IBM i Unqualified Library Call Privilege Escalation

Publication date: 2026-06-11

Last updated on: 2026-06-11

Assigner: IBM Corporation

Description
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-11
Last Modified
2026-06-11
Generated
2026-06-11
AI Q&A
2026-06-11
EPSS Evaluated
N/A
NVD
CVE-2026-7870
EUVD
EUVD-2026-36250
Affected Vendors & Products
Showing 4 associated CPEs
Vendor Product Version / Range
ibm ibm_i From 7.3 (inc)
ibm ibm_i From 7.4 (inc)
ibm ibm_i From 7.5 (inc)
ibm ibm_i From 7.6 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-427 The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Impact Analysis

This vulnerability can have a severe impact as it allows an attacker to gain elevated privileges on the affected IBM i systems. With administrator privileges, the attacker can execute arbitrary code, potentially leading to full system compromise, unauthorized access to sensitive data, and disruption of services.

Executive Summary

CVE-2026-7870 is a vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6 caused by an unqualified library call. This flaw allows a malicious actor to execute user-controlled code with administrator privileges by exploiting the way the system searches for libraries.

Mitigation Strategies

To mitigate this vulnerability, you should apply the Program Temporary Fixes (PTFs) released by IBM for each affected version of IBM i (7.3, 7.4, 7.5, and 7.6).

There are no workarounds currently available, so applying the official fixes is the only recommended action.

If you are running unsupported versions of IBM i, you should upgrade to a supported release to address this issue.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-7870. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart