CVE-2026-17197

Undergoing Analysis Undergoing Analysis - In Progress

Security Bypass in IBM i via Client Identity Spoofing

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of client-asserted identity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-13

Generated

2026-08-14

AI Q&A

2026-08-14

EPSS Evaluated

N/A

NVD

CVE-2026-17197

EUVD

EUVD-2026-58230

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.6
ibm	i	7.5
ibm	i	7.4
ibm	i	7.3
ibm	i	to 7.4 (exc)
ibm	i	to 7.5 (exc)
ibm	i	to 7.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

CVE-2026-17197 is a vulnerability in IBM i where a remote attacker can bypass security restrictions due to improper validation of client-asserted identity. This flaw allows unauthorized access by exploiting weak authentication checks.

Impact Analysis

This vulnerability could allow attackers to gain unauthorized access to systems, potentially leading to data breaches, privilege escalation, or further network compromise. Systems running IBM i 7.3 to 7.6 are at risk.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations due to unauthorized data access or breaches. Organizations must remediate it to maintain compliance with data protection requirements.

Mitigation Strategies

Apply the appropriate PTFs as recommended by IBM to remediate the issue. Users running unsupported versions should upgrade to a supported release.

Hi! I’m here to help you understand CVE-2026-17197. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70