CVE-2026-17068Medium· 5.4▾ SunlitIBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.
i 7.6i 7.5i 7.4i 7.3Application of the PTFs require additional actions that if not taken will cause existing NFS mounts to become inaccessible. View each PTF's cover letter for the additional actions required prior to installation.
IBM i Release5770-SS1 PTF Number(s)PTF Download Link(s)7.6SJ11753 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11753 7.5SJ11790 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11790 7.4SJ11802 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11802 7.3SJ11804 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11804
IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-17073Medium· 5.4IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System
CVE-2026-17275Low· 3.7IBM i is Affected by an Improper Validation Vulnerability
CVE-2026-18175High· 8.1IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due to improper authorization in the DDM target dispatcher.
CVE-2026-102917High· 7.8IBM i is Affected By An Improper Privilege Management Vulnerability
CVE-2026-17488Medium· 4.3IBM i is Affected By An Improper Authentication Vulnerability in SST / DST
CVE-2026-17491Medium· 5.4IBM i is Affected By An Improper Privilege Management Vulnerability in OpenSSH