CVE-2026-17484: IBM i is Information Disclosure
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.
Other sources
IBM i could allow a local attacker to cause a denial of service due to improper access control.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM i 7.3to a version that resolves this vulnerability.Patch MJ11633 - Upgrade
Upgrade
IBM i 7.4to a version that resolves this vulnerability.Patch MJ11634 - Upgrade
Upgrade
IBM i 7.5to a version that resolves this vulnerability.Patch MJ11635 - Upgrade
Upgrade
IBM i 7.6to a version that resolves this vulnerability.Patch MJ11636
Event History
Frequently Asked Questions
Are the reported impact details internally consistent?
No. The description states that improper access control could let a local attacker cause denial of service, while the CVSS vector indicates low confidentiality impact and no availability impact. The access vector also indicates network access, which differs from the description’s local-attacker characterization.