CVE-2026-17275

Awaiting Analysis Awaiting Analysis - Queue

Unauthorized Transaction Manipulation in IBM i

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: IBM Corporation

Description

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-16

Last Modified

2026-10-16

Generated

2026-10-17

AI Q&A

2026-10-17

EPSS Evaluated

N/A

NVD

CVE-2026-17275

EUVD

EUVD-2026-103139

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	i	7.6
IBM	i	7.5
IBM	i	7.4
IBM	i	7.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM i versions 7.3 to 7.6 allows a remote attacker to manipulate distributed transactions by exploiting improper validation of transaction identifiers. This could lead to unauthorized changes in transaction data without proper authorization.

Impact Analysis

An attacker could exploit this to alter transaction data, potentially causing financial loss, data corruption, or unauthorized transactions. The impact depends on the system's use but may affect business operations or data integrity.

Compliance Impact

This vulnerability could lead to unauthorized data manipulation, violating integrity requirements in GDPR and HIPAA. Non-compliance risks fines or penalties due to compromised transaction integrity and potential data breaches.

Mitigation Strategies

Apply IBM i PTFs or updates to address improper validation of transaction identifiers. Monitor IBM i security bulletins for patches and restrict remote access to distributed transaction services until mitigation is applied.

Hi! I’m here to help you understand CVE-2026-17275. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70