CVE-2026-77153: IBM i is Affected By Missing Authorization Vulnerability in Host-Based Printer Subsystem []

Q: Who can exploit this issue?

A remote, unauthenticated attacker could exploit it. The issue affects the Host-Based Printer Subsystem on IBM i 7.3, 7.4, 7.5, and 7.6.

Q: What could an attacker gain or do?

An attacker could obtain sensitive information and print files that they should not be authorized to access.

Q: Does exploitation require user interaction or existing credentials?

No. The supplied vector indicates that exploitation does not require privileges or user interaction, although attack complexity is rated high.

Published Oct 27, 2026

Updated

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to obtain sensitive information from the Host-Based Printer Subsystem due to no authorization check. A bad actor could use this vulnerability to print files they should not be able to access.

Other sources

IBM i could allow a remote unauthenticated attacker to obtain sensitive information from the Host-Based Printer Subsystem due to no authorization check. A bad actor could use this vulnerability to print files they should not be able to access.

— IBM

Affected Software

4 affected components

IBM i<=7.6

IBM i<=7.5

IBM i<=7.4

IBM i<=7.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM i 7.6 to a version that resolves this vulnerability.
Patch SJ11502
Upgrade
Upgrade IBM i 7.5 to a version that resolves this vulnerability.
Patch SJ11523
Upgrade
Upgrade IBM i 7.4 to a version that resolves this vulnerability.
Patch SJ11524
Upgrade
Upgrade IBM i 7.3 to a version that resolves this vulnerability.
Patch SJ11522
Upgrade
Upgrade Access Client Solutions (ACS) to a version that resolves this vulnerability.
Fixed in 1.1.9.15

Event History

Oct 27, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 8, 2026

CVE Published

via MITRE·06:38 PM

Data Sourced

via MITRE·06:38 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7294253

Frequently Asked Questions

Who can exploit this issue?

A remote, unauthenticated attacker could exploit it. The issue affects the Host-Based Printer Subsystem on IBM i 7.3, 7.4, 7.5, and 7.6.

What could an attacker gain or do?

An attacker could obtain sensitive information and print files that they should not be authorized to access.

Does exploitation require user interaction or existing credentials?

No. The supplied vector indicates that exploitation does not require privileges or user interaction, although attack complexity is rated high.

CVE-2026-77153: IBM i is Affected By Missing Authorization Vulnerability in Host-Based Printer Subsystem []

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Who can exploit this issue?

What could an attacker gain or do?

Does exploitation require user interaction or existing credentials?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What could an attacker gain or do?

Does exploitation require user interaction or existing credentials?