{"id":"CVE-2026-102917","title":"IBM i is Affected By An Improper Privilege Management Vulnerability","summary":"IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-269"],"vendor":"IBM","product":"i","affected":["i 7.6","i 7.5","i 7.4","i 7.3"],"published":"2026-10-16","updated":"2026-10-16","sourceUpdated":"2026-10-16T18:38:31.200Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102917","references":[{"url":"https://www.ibm.com/support/pages/node/7292422"}],"tags":["cve.org"],"ingestedAt":"2026-10-16T19:46:24.440Z","slug":"CVE-2026-102917","body":"## Overview\n\nIBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.\n\n## Affected\n\n- `i 7.6`\n- `i 7.5`\n- `i 7.4`\n- `i 7.3`\n\n## Remediation\n\nIBM i Release5770-SS1 \nPTF Number(s)PTF Download Link(s)7.6SJ11832 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11832 7.5SJ11775 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11775 7.4SJ11833 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11833 7.3SJ11841 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11841 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}