CVE-2026-17275: IBM i is Affected by an Improper Validation Vulnerability
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.
Other sources
IBM i could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Patch SJ11429 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Patch SJ11543 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Patch SJ11545 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Patch SJ11430 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Patch SJ11546 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Patch SJ11431 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Patch SJ11435
Event History
Frequently Asked Questions
Does exploiting this issue require authentication or user interaction?
No. The CVSS vector indicates no privileges are required and no user interaction is required.
How difficult is exploitation expected to be?
The CVSS vector rates attack complexity as high, indicating exploitation depends on conditions beyond simply reaching the affected service.
What is the expected security impact?
The reported impact is limited to integrity, rated Low. No confidentiality or availability impact is identified.