PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-17488 IBM CVE debrief

IBM i 7.3, 7.4, 7.5, and 7.6 are affected by an improper authentication vulnerability in SST / DST, allowing a remote authenticated attacker to bypass security restrictions. The vulnerability has a CVSS score of 4.3 and a severity of MEDIUM. This vulnerability allows a remote authenticated attacker to bypass security restrictions on IBM i 7.3, 7.4, 7.5, and 7.6 systems, potentially leading to security incidents. Defenders should prioritize verifying exposure, assessing impact, and applying patches or advisories. The CVE record and source item provide details on the vulnerability, including its description, CVSS score, and affected versions. However, additional information on and

Vendor
IBM
Product
i
CVSS
MEDIUM 4.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-16
Original CVE updated
2026-10-19
Advisory published
2026-10-16
Advisory updated
2026-10-19

Who should care

Defenders responsible for IBM i systems, particularly those using versions 7.3, 7.4, 7.5, and 7.6, should assess their exposure and potential impact of this vulnerability.

Why it matters

This vulnerability allows a remote authenticated attacker to bypass security restrictions on IBM i 7.3, 7.4, 7.5, and 7.6 systems, potentially leading to security incidents. Defenders should prioritize verifying exposure, assessing impact, and applying patches or advisories.

  • Verify exposure of IBM i systems to this vulnerability
  • Assess potential security incidents related to authentication bypass
  • Apply vendor-provided patches or advisories to mitigate the vulnerability
  • Monitor systems for unusual activity

Technical summary

IBM i 7.3, 7.4, 7.5, and 7.6 are affected by an improper authentication vulnerability in SST / DST. This vulnerability allows a remote authenticated attacker to bypass security restrictions. The CVSS score for this vulnerability is 4.3, indicating a MEDIUM severity level.

Defensive priority

Defenders should prioritize verifying exposure and assessing the impact of this vulnerability on their systems, particularly those using IBM i 7.3, 7.4, 7.5, and 7.6.

Recommended defensive actions

  • Verify exposure by checking if IBM i 7.3, 7.4, 7.5, or 7.6 is in use and assess the impact of the vulnerability
  • Review and apply the vendor-provided patch or advisory
  • Monitor systems for potential security incidents related to this vulnerability

Evidence notes

The CVE record and source item provide details on the vulnerability, including its description, CVSS score, and affected versions. However, additional information on exploitation, impact, and remediation is limited.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-17488 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-17488

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-17488 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-17488

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.