CVE-2026-17491Medium· 5.4▾ SunlitIBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive.
i 7.6i 7.5i 7.4i 7.3IBM i Release5733-SC1 PTF Number(s)PTF Download Link(s)7.6SJ11849 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11849 7.5SJ11850 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11850 7.4SJ11852 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11852 7.3SJ11852 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11852
IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-102917High· 7.8IBM i is Affected By An Improper Privilege Management Vulnerability
CVE-2026-18343Medium· 4.4IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.
CVE-2026-17488Medium· 4.3IBM i is Affected By An Improper Authentication Vulnerability in SST / DST
CVE-2026-17073Medium· 5.4IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System
CVE-2026-17068Medium· 5.4IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System
CVE-2026-17275Low· 3.7IBM i is Affected by an Improper Validation Vulnerability