CVE-2026-17275: IBM i is Affected by an Improper Validation Vulnerability

Q: Does exploiting this issue require authentication or user interaction?

No. The CVSS vector indicates no privileges are required and no user interaction is required.

Q: How difficult is exploitation expected to be?

The CVSS vector rates attack complexity as high, indicating exploitation depends on conditions beyond simply reaching the affected service.

Q: What is the expected security impact?

The reported impact is limited to integrity, rated Low. No confidentiality or availability impact is identified.

Published Oct 13, 2026

Updated

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.

Other sources

IBM i could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.

— IBM

Affected Software

5 affected components

IBM IBM i=7.3, =7.4, =7.5, =7.6

IBM i<=7.6

IBM i<=7.5

IBM i<=7.4

IBM i<=7.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM i to a version that resolves this vulnerability.
Patch SJ11429
Upgrade
Upgrade IBM i to a version that resolves this vulnerability.
Patch SJ11543
Upgrade
Upgrade IBM i to a version that resolves this vulnerability.
Patch SJ11545
Upgrade
Upgrade IBM i to a version that resolves this vulnerability.
Patch SJ11430
Upgrade
Upgrade IBM i to a version that resolves this vulnerability.
Patch SJ11546
Upgrade
Upgrade IBM i to a version that resolves this vulnerability.
Patch SJ11431
Upgrade
Upgrade IBM i to a version that resolves this vulnerability.
Patch SJ11435

Event History

Oct 13, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Oct 16, 2026

CVE Published

via MITRE·06:39 PM

Data Sourced

via MITRE·06:39 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7292222

Frequently Asked Questions

Does exploiting this issue require authentication or user interaction?

No. The CVSS vector indicates no privileges are required and no user interaction is required.

How difficult is exploitation expected to be?

The CVSS vector rates attack complexity as high, indicating exploitation depends on conditions beyond simply reaching the affected service.

What is the expected security impact?

The reported impact is limited to integrity, rated Low. No confidentiality or availability impact is identified.

CVE-2026-17275: IBM i is Affected by an Improper Validation Vulnerability

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Does exploiting this issue require authentication or user interaction?

How difficult is exploitation expected to be?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

Does exploiting this issue require authentication or user interaction?

How difficult is exploitation expected to be?

What is the expected security impact?