CVE-2026-18343: IBM i is Affected By An Improper Privilege Management Vulnerability
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.
Other sources
IBM i could allow a local attacker to modify the BOOTP table due to improper authorization.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.6Patch SJ11460 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.5Patch SJ11461 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.4Patch SJ11462 - Upgrade
Upgrade
IBM ito a version that resolves this vulnerability.Fixed in 7.3Patch SJ11463
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs local access to an affected IBM i system and low-level privileges. The issue affects IBM i versions 7.3, 7.4, 7.5, and 7.6.
What could an attacker do if they exploit it?
They could modify the BOOTP table because authorization is improperly enforced. The provided severity vector indicates potential low-impact confidentiality and integrity effects, with no availability impact stated.