{"id":"CVE-2026-17275","title":"IBM i is Affected by an Improper Validation Vulnerability","summary":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.","severity":"low","cvss":3.7,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvssSource":"cna","cwe":["CWE-285"],"vendor":"IBM","product":"i","affected":["i 7.6","i 7.5","i 7.4","i 7.3"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-16T19:08:40.482987Z"},"published":"2026-10-16","updated":"2026-10-16","sourceUpdated":"2026-10-16T19:09:21.358Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-17275","references":[{"url":"https://www.ibm.com/support/pages/node/7292222"}],"tags":["cve.org"],"ingestedAt":"2026-10-16T19:46:24.334Z","slug":"CVE-2026-17275","body":"## Overview\n\nIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.\n\n## Affected\n\n- `i 7.6`\n- `i 7.5`\n- `i 7.4`\n- `i 7.3`\n\n## Remediation\n\nIBM i Release5770-SS1 \nPTF Number(s)PTF Download Link(s)7.6SJ11429\nSJ11543 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11429 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11543 7.5SJ11430\nSJ11545 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11430 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11545 7.4SJ11431\nSJ11546 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11431 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11546 7.3SJ11435 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11435 \n\n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.","depth":"sunlit","depthScore":20,"depthScoreParts":{"impact":20.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}