Skip to content
OpenAdvisories
Medium WID-SEC-2026-4025 3 CVEs

IBM i: Mehrere Schwachstellen

Published Oct 18, 2026 · Updated Oct 18, 2026 · de-DE

Vendor: IBM Product: i

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM i ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.

Product

IBM i (früher bekannt als IBM iSeries oder IBM System i) ist ein Betriebssystem, das auf IBM Power Systems Servern läuft und für Geschäftsanwendungen entwickelt wurde.

Vulnerabilities 3

  • High 7.8
    CVE-2026-102917

    IBM i is Affected By An Improper Privilege Management Vulnerability

    IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.

    IBM i
  • Medium 5.4
    CVE-2026-17068

    IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System

    IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.

    IBM i
  • Medium 5.4
    CVE-2026-17073

    IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System

    IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution.

    IBM i

Revision history

  1. #1

    Initiale Fassung

References