Medium · 5.4 CVE-2026-17068 EUVD-2026-103141GHSA-xcpc-99c5-x72g

IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System

Published Oct 16, 2026 · Updated Oct 16, 2026 · Assigned by ibm

Vendor: IBM Product: i

Description

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.

Affected products

Vendor	Product	Affected	Fixed
IBM	i	7.6, 7.5, 7.4, 7.3	—

Advisories 1

WID-SEC-2026-4025 IBM i: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026

References

https://www.ibm.com/support/pages/node/7292423 vendor-advisory patch