CVE-2026-17276

Analyzed Analyzed - Analysis Complete

Privilege Escalation in IBM i Due to Improper Authorization

Publication date: 2026-08-12

Last updated on: 2026-08-13

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privileges due to improper authorization in the handling of high-authority threads.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-13

Generated

2026-09-02

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-31

NVD

CVE-2026-17276

EUVD

EUVD-2026-57361

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	From 7.3 (inc) to 7.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM i allows a remote authenticated attacker to escalate their privileges. It occurs due to improper authorization when handling high-authority threads, meaning an attacker could gain higher access levels than intended.

Detection Guidance

This vulnerability involves improper authorization in IBM i systems, allowing privilege escalation. Detection requires checking for unauthorized high-authority thread usage. Review system logs for unusual privilege changes or thread activity. Use IBM i commands like DSPLOG to inspect logs and WRKACTJOB to monitor active jobs for suspicious high-authority processes.

Impact Analysis

If exploited, this vulnerability could allow attackers to perform unauthorized actions with elevated privileges. This might include accessing sensitive data, modifying system configurations, or disrupting operations on affected IBM i systems.

Compliance Impact

This vulnerability allows remote authenticated attackers to escalate privileges, which could lead to unauthorized access to sensitive data. This may violate compliance requirements under GDPR, HIPAA, and other regulations that mandate strict access controls and data protection measures.

Mitigation Strategies

Apply IBM i PTFs or updates to address improper authorization in high-authority threads. Monitor IBM i security bulletins for patches and restrict remote authenticated access until fixes are applied.

Hi! I’m here to help you understand CVE-2026-17276. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70