Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
7966 articles · 242755 vulns · 37/41 feeds (7d)
← Back to list
7.8
CVE-2026-102917PATCHED
ibm · i

IBM i is Affected By An Improper Privilege Management Vulnerability

Description

IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.

Affected Products

VendorProductVersions
ibmi7.6, 7.5, 7.4, 7.3

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
ibmibm icert_advisory90%

References

  • https://www.ibm.com/support/pages/node/7292422(vendor-advisory, patch)

Related News (2 articles)

Tier B
BSI Advisories1d ago
[NEU] [mittel] IBM i: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB3d ago
CVE-2026-102917 | IBM i 7.3/7.4/7.5/7.6 privileges management
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.17.8 HIGH
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://www.ibm.com/support/pages/node/7292422
CWECWE-269
PublishedOct 16, 2026
Last enriched3d ago
Trending Score39
Source articles2
Independent2
Info Completeness6/14
Missing: vendor, product, versions, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-109126
IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials
Trending: 44
HIGHCVE-2026-107366
Langflow OSS Authorization Bypass Through User-Controlled Key
Trending: 43
HIGHCVE-2026-105453
IBM Sterling Connect:Direct for Unix Improper Privilege Management
Trending: 38
CRITICALCVE-2026-93909
IBM WebSphere Application Server Liberty is affected by an authentication bypass
Trending: 36
HIGHCVE-2026-6719
IBM Concert Software Use of Insufficiently Random Values
Trending: 34

Pin to Dashboard

Verification

State: verified
Confidence: 100%

Vulnerability Timeline

CVE Published
Oct 16, 2026
Discovered by ZDM
Oct 16, 2026
Patch Available
Oct 20, 2026