Back Sploitus

CVE-2026

Sploitus • October 16, 2026

IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

IBM i Vulnerable to Privilege Escalation (CVE-2026-102917) IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to CVE-2026-102917, allowing authenticated attackers to elevate privileges to QSECOFR/Root authority. This vulnerability poses a high-impact risk as it enables unauthorized access to sensitive data and critical services. Attackers require local access and a valid low-privileged account, with exploitation rated as low complexity. The CVSS score for this vulnerability is 7.8, indicating a significant threat. IBM recommends applying corrective patches and reviewing security configurations to mitigate risks. Currently, there is no evidence of active exploitation reported. Organizations using IBM i for core business applications should prioritize remediation efforts. 2 sources 57

Extracted Entities

CVE-2026

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)