Live › vulnerability › CVE-2026-17275
Go to dashboardIBM i 7.3 through 7.6 does not properly validate transaction identifiers supplied by a remote client. A remote attacker can therefore tamper with distributed transactions they should not be able to change.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
IBM i 7.3, 7.4, 7.5 and 7.6 systems that handle distributed transactions over the network. The sources do not say which services or configurations are exposed, so whether a given system is affected is unknown.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ibm i | vendor | = 7.3 | – |
| ibm i | vendor | = 7.4 | – |
| ibm i | vendor | = 7.5 | – |
| ibm i | vendor | = 7.6 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.
This page as .md · .json · in your agent: get_signal("CVE-2026-17275")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.