VULNERABILITY INTELLIGENCE
CVE-2026-17499
CVSS score4.4 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-09-04
Last modified2026-09-09
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Description
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
Weakness classification
- psirt@us.ibm.com: CWE-78
Primary references
- psirt@us.ibm.com — Patch, Vendor Advisory