CVE-2026-17642

Analyzed Analyzed - Analysis Complete

Command Injection in IBM i Operating System

Publication date: 2026-08-12

Last updated on: 2026-08-17

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-17

Generated

2026-09-02

AI Q&A

2026-08-13

EPSS Evaluated

2026-08-31

NVD

CVE-2026-17642

EUVD

EUVD-2026-57532

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.3
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability allows a remote authenticated attacker to execute arbitrary commands on IBM i systems running versions 7.6, 7.5, 7.4, and 7.3. The issue arises due to improper neutralization of special elements used in OS commands, which can be exploited to run unauthorized commands.

Detection Guidance

Detection involves checking for IBM i systems running vulnerable versions (7.3, 7.4, 7.5, 7.6) and verifying if the Resource Monitoring and Control (RMC) component is exposed. Use IBM i commands like DSPPTF to check installed PTFs and WRKSRVAGT to inspect RMC agent status. Network scanning tools like nmap can identify IBM i systems and open ports.

Impact Analysis

An attacker could gain control over the affected IBM i system, leading to potential data breaches, unauthorized access to sensitive information, or disruption of services. The high CVSS score (8.8) indicates significant risk of confidentiality, integrity, and availability impacts.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, and other regulations due to unauthorized data access or exposure. Organizations may face legal penalties, reputational damage, and loss of customer trust if exploited.

Mitigation Strategies

Apply IBM i PTFs or updates as soon as they become available to address the improper neutralization issue. Restrict remote authenticated user access to only necessary privileges and monitor for unusual command execution patterns.

Hi! I’m here to help you understand CVE-2026-17642. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70