CVE-2026-16941: IBM i is Affected By An Incorrect Authorization Vulnerability []

Q: What level of access does an attacker need to exploit this issue?

An attacker must be remotely authenticated and have low-level privileges. No user interaction is required.

Q: What is the impact if the issue is exploited?

A successful attacker could modify certain system messages. The provided severity vector indicates an integrity impact, with no stated confidentiality or availability impact.

Q: Which IBM i releases are identified as affected?

IBM i 7.4, 7.5, and 7.6 are identified as affected.

Published Sep 1, 2026

Updated

IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper authorization.

Other sources

IBM i could allow a remote authenticated attacker to modify certain system messages due to improper authorization.

— IBM

Affected Software

4 affected components

IBM IBM i=7.6, =7.5, =7.4

IBM i<=7.6

IBM i<=7.5

IBM i<=7.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM i 7.6 to a version that resolves this vulnerability.
Fixed in 7.6Patch SJ11201
Upgrade
Upgrade IBM i 7.5 to a version that resolves this vulnerability.
Fixed in 7.5Patch SJ11210
Upgrade
Upgrade IBM i 7.4 to a version that resolves this vulnerability.
Fixed in 7.4Patch SJ11211

Event History

Sep 1, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Sep 4, 2026

CVE Published

via MITRE·04:39 PM

Data Sourced

via MITRE·04:39 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7285848

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

An attacker must be remotely authenticated and have low-level privileges. No user interaction is required.

What is the impact if the issue is exploited?

A successful attacker could modify certain system messages. The provided severity vector indicates an integrity impact, with no stated confidentiality or availability impact.

Which IBM i releases are identified as affected?

IBM i 7.4, 7.5, and 7.6 are identified as affected.

CVE-2026-16941: IBM i is Affected By An Incorrect Authorization Vulnerability []

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the impact if the issue is exploited?

Which IBM i releases are identified as affected?

Company

Resources

Contact