CVE-2026-93744Medium· 6.5▾ SunlitIBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to a…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability to alter server-side session security state.
i 7.6i 7.5i 7.4i 7.3IBM i Release5770-SS1 Option 3 PTF Number(s)PTF Download Link(s)7.6SJ11740 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11740 7.5SJ11745 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11745 7.4SJ11746 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11746 7.3SJ11747 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11747
IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-17488Medium· 4.3IBM i is Affected By An Improper Authentication Vulnerability in SST / DST
CVE-2026-18221High· 8.1IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper validation of client-supplied authentication parameters.
CVE-2026-16892Medium· 5.4IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching.
CVE-2026-107400High· 8.8Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication
CVE-2026-102917High· 7.8IBM i is Affected By An Improper Privilege Management Vulnerability
CVE-2026-17491Medium· 5.4IBM i is Affected By An Improper Privilege Management Vulnerability in OpenSSH