{"id":"CVE-2026-77153","kind":"vulnerability","aliases":["CVE-2026-77153"],"related":[],"title":"IBM i: unauthenticated remote users can print files they should not access","description":"IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to obtain sensitive information from the Host-Based Printer Subsystem due to no authorization check. A bad actor could use this vulnerability to print files they should not be able to access.","summary":"IBM i versions 7.3 through 7.6 lack an authorization check in the Host-Based Printer Subsystem. A remote attacker without credentials can obtain sensitive information by printing files they should not be able to reach.","severity":"medium","cvss":4.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["as400","ibm-i","infrastructure","printing"],"not_affected_if":["other-release"],"how_to_check":"- Confirm the IBM i release on the system, for example with `DSPPTF` or the `Display Software Resources` screen, and check whether it is 7.3, 7.4, 7.5 or 7.6.\n- Check whether the Host-Based Printer Subsystem is in use on the system.","fix":null,"status":"open","published_at":"2026-11-08T19:17:40+00:00","first_seen_at":"2026-11-08T19:22:34+00:00","triaged_at":"2026-11-08T19:23:24+00:00","updated_at":"2026-11-08T19:23:24+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-08T19:23:24Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM i: unauthenticated remote users can print files they should not access","impact":"medium","summary":"IBM i versions 7.3 through 7.6 lack an authorization check in the Host-Based Printer Subsystem. A remote attacker without credentials can obtain sensitive information by printing files they should not be able to reach.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ibm-i","as400","printing"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"remote attacker reads sensitive files via printing","analyst_note":"Find IBM's security bulletin for CVE-2026-77153 to confirm affected PTF levels, fixed versions and whether the printer subsystem is on by default.","how_to_check":"- Confirm the IBM i release on the system, for example with `DSPPTF` or the `Display Software Resources` screen, and check whether it is 7.3, 7.4, 7.5 or 7.6.\n- Check whether the Host-Based Printer Subsystem is in use on the system.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["other-release"],"who_is_affected":"IBM i 7.3, 7.4, 7.5 and 7.6 systems that run the Host-Based Printer Subsystem are exposed to remote requests. The sources do not say which configurations are affected beyond that, or whether the subsystem is enabled by default. Teams on other IBM i releases, or without the printer subsystem in use, can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000745,"input_tokens":4564,"output_tokens":577,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-77153':15A,18A '7.3':28B,67C '7.4':65C '7.5':64C '7.6':30B,63C 'abl':58B,104C 'access':12A,106C 'actor':92C 'allow':69C 'as400':19B 'attack':44B,73C 'author':33B,88C 'bad':91C 'base':39B,82C 'check':34B,89C 'could':68C,93C 'credenti':46B 'cve':13A,16A 'due':85C 'file':8A,53B,99C 'host':38B,81C 'host-bas':37B,80C 'ibm':1A,21B,25B,61C 'ibm-i':20B 'inform':50B,77C 'infrastructur':23B 'lack':31B 'obtain':48B,75C 'print':7A,24B,52B,98C 'printer':40B,83C 'reach':60B 'remot':4A,43B,71C 'sensit':49B,76C 'subsystem':41B,84C 'unauthent':3A,72C 'use':94C 'user':5A 'version':27B 'vulner':96C 'without':45B","nicknames":[],"mitigations":[],"who_affected":"IBM i 7.3, 7.4, 7.5 and 7.6 systems that run the Host-Based Printer Subsystem are exposed to remote requests. The sources do not say which configurations are affected beyond that, or whether the subsystem is enabled by default. Teams on other IBM i releases, or without the printer subsystem in use, can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["as400","ibmi","infrastructure","medium","printing"],"campaign_type":null,"search_a":"'-2026':14A,17A '-77153':15A,18A 'access':12A 'cve':13A,16A 'file':8A 'ibm':1A 'print':7A 'remot':4A 'unauthent':3A 'user':5A","search_b":"'7.3':28B '7.6':30B 'abl':58B 'as400':19B 'attack':44B 'author':33B 'base':39B 'check':34B 'credenti':46B 'file':53B 'host':38B 'host-bas':37B 'ibm':21B,25B 'ibm-i':20B 'inform':50B 'infrastructur':23B 'lack':31B 'obtain':48B 'print':24B,52B 'printer':40B 'reach':60B 'remot':43B 'sensit':49B 'subsystem':41B 'version':27B 'without':45B","search_c":"'7.3':67C '7.4':65C '7.5':64C '7.6':63C 'abl':104C 'access':106C 'actor':92C 'allow':69C 'attack':73C 'author':88C 'bad':91C 'base':82C 'check':89C 'could':68C,93C 'due':85C 'file':99C 'host':81C 'host-bas':80C 'ibm':61C 'inform':77C 'obtain':75C 'print':98C 'printer':83C 'remot':71C 'sensit':76C 'subsystem':84C 'unauthent':72C 'use':94C 'vulner':96C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T19:17:40+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-77153","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77153","severity":null,"published_at":"2026-11-08T19:17:40+00:00","modified_at":"2026-11-08T19:17:40+00:00","first_seen_at":"2026-11-08T19:22:34+00:00","fetched_at":"2026-11-08T19:22:34+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}