CVE-2026-16941

Analyzed Analyzed - Analysis Complete

Improper Authorization in IBM i System Messages

Publication date: 2026-09-04

Last updated on: 2026-09-10

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper authorization.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-04

Last Modified

2026-09-10

Generated

2026-09-25

AI Q&A

2026-09-04

EPSS Evaluated

2026-09-24

NVD

CVE-2026-16941

EUVD

EUVD-2026-71483

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM i 7.6, 7.5, and 7.4 allows a remote authenticated attacker to modify certain system messages due to improper authorization checks.

Detection Guidance

To detect this vulnerability, check if your IBM i system is running affected versions (7.4, 7.5, or 7.6) and verify if the required PTFs (SJ11201 for 7.6, SJ11210 for 7.5, SJ11211 for 7.4) are installed. Use the command DSPPTF LICPGM(5770SS1) to list installed PTFs and compare them against the required ones.

Impact Analysis

An attacker could alter system messages, potentially misleading users or administrators about system status or security events. This could lead to confusion, incorrect actions, or delayed responses to actual security incidents.

Compliance Impact

The vulnerability allows remote authenticated attackers to modify system messages due to improper authorization, which could lead to unauthorized changes in logs or system communications. This may impact compliance with standards requiring integrity of audit logs and data integrity, such as GDPR (data integrity principles) and HIPAA (integrity and audit controls).

Mitigation Strategies

Apply IBM i PTFs or updates to address improper authorization in system messages. Review and restrict user permissions to prevent unauthorized modifications. Monitor system logs for unusual activity related to message changes.

Hi! I’m here to help you understand CVE-2026-16941. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70