CVE-2026-17074: IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

Published Aug 12, 2026

Updated

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management.

Other sources

IBM i could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management.

— IBM

Affected Software

4 affected components

IBM i<=7.6

IBM i<=7.5

IBM i<=7.4

IBM i<=7.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM i 7.6 to a version that resolves this vulnerability.
Fixed in 7.6Patch SJ10848
Upgrade
Upgrade IBM i 7.5 to a version that resolves this vulnerability.
Fixed in 7.5Patch SJ10849
Upgrade
Upgrade IBM i 7.4 to a version that resolves this vulnerability.
Fixed in 7.4Patch SJ10850
Upgrade
Upgrade IBM i 7.3 to a version that resolves this vulnerability.
Fixed in 7.3Patch SJ10851

Event History

Aug 12, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Aug 13, 2026

CVE Published

via MITRE·08:25 PM

Data Sourced

via MITRE·08:25 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7283572

Frequently Asked Questions

What is the severity of CVE-2026-17074?

The severity of CVE-2026-17074 is rated as low with a score of 3.1.

What systems are affected by CVE-2026-17074?

CVE-2026-17074 affects IBM i versions 7.6, 7.5, 7.4, and 7.3.

How can I mitigate CVE-2026-17074?

To mitigate CVE-2026-17074, ensure proper privilege management and apply any relevant security patches from IBM.

Who can exploit CVE-2026-17074?

A remote authenticated attacker can exploit CVE-2026-17074 by bypassing security restrictions due to improper privilege management.

What is the nature of the vulnerability in CVE-2026-17074?

CVE-2026-17074 involves improper privilege management that could allow an attacker to bypass security restrictions.

CVE-2026-17074: IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

Other sources

Affected Software

Remediation

Event History

Parent advisories

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-17074?

What systems are affected by CVE-2026-17074?

How can I mitigate CVE-2026-17074?

Who can exploit CVE-2026-17074?

What is the nature of the vulnerability in CVE-2026-17074?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-17074?

What systems are affected by CVE-2026-17074?

How can I mitigate CVE-2026-17074?

Who can exploit CVE-2026-17074?

What is the nature of the vulnerability in CVE-2026-17074?