Live › vulnerability › CVE-2026-102917
Go to dashboardIBM i versions 7.3 through 7.6 let a logged-in user raise their privileges. An attacker who exploits it can act with QSECOFR (security officer) authority on the system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any IBM i 7.3, 7.4, 7.5 or 7.6 system where users can log in. The sources do not list fixed releases or PTFs, so unknown. Systems where no untrusted users have accounts are lower risk, but the sources do not say that removes exposure.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ibm i | vendor | = 7.3 | – |
| ibm i | vendor | = 7.4 | – |
| ibm i | vendor | = 7.5 | – |
| ibm i | vendor | = 7.6 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.
This page as .md · .json · in your agent: get_signal("CVE-2026-102917")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.