Live › vulnerability › CVE-2026-17073
Go to dashboardIBM i versions 7.3 through 7.6 do not perform subtree checks when resolving file handles. A local attacker can use this to obtain sensitive information they should not be able to read.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
IBM i 7.3, 7.4, 7.5 and 7.6 systems where local users can log on or run code. Remote-only exposure is not described in the sources. Fixed versions and PTFs are not stated in the sources.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ibm i | vendor | = 7.3 | – |
| ibm i | vendor | = 7.4 | – |
| ibm i | vendor | = 7.5 | – |
| ibm i | vendor | = 7.6 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution.
This page as .md · .json · in your agent: get_signal("CVE-2026-17073")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.