Sploitus

IBM i Vulnerable to Privilege Escalation (CVE-2026-102917)

First seen 17 Oct 2026, 16:47 UTC • •57.0

Article Content

1 / 4

Browse articles

ThreatCluster •October 17, 2026 at 18:49 UTC

•CVE-2026-102917 allows privilege escalation on IBM i systems.
•Affected versions include IBM i 7.3 to 7.6, with a CVSS score of 7.8.
•No active exploitation has been confirmed; remediation is advised.

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to CVE-2026-102917, allowing authenticated attackers to elevate privileges to QSECOFR/Root authority. This vulnerability poses a high-impact risk as it enables unauthorized access to sensitive data and critical services. Attackers require local access and a valid low-privileged account, with exploitation rated as low complexity. The CVSS score for this vulnerability is 7.8, indicating a significant threat. IBM recommends applying corrective patches and reviewing security configurations to mitigate risks. Currently, there is no evidence of active exploitation reported. Organizations using IBM i for core business applications should prioritize remediation efforts.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-10-16

CVE-2026-102917 published

IBM disclosed the privilege escalation vulnerability affecting multiple IBM i versions.

Redpacketsecurity

2026-10-16

CVE-2026-102917 reported by Sploitus

Sploitus confirmed the vulnerability details and its potential impact on IBM i systems.

2026-10-17

IBM support page updated

IBM provided additional details on the vulnerability and recommended patches for affected versions.

More articles in this cluster (3)

Threat Graph

6 entities, 5 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Privilege Escalation
Zero-day Exploit
T1068 - Exploitation for Privilege Escalation

Vulnerability (1)

CVE-2026-102917

Weakness (1)

CWE-269 - Improper Privilege Management

Affected Platform (1)

IBM I

Relationships

CVE-2026-102917 targets IBM I
Privilege Escalation targets IBM I
Zero-day Exploit targets IBM I
T1068 - Exploitation for Privilege Escalation targets IBM I
CVE-2026-102917 related to CWE-269 - Improper Privilege Management

Following this threat?

Track CVE-2026-102917 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What versions of IBM i are affected?

IBM i versions 7.3, 7.4, 7.5, and 7.6 are affected by CVE-2026-102917.

Is there any active exploitation of this vulnerability?

No active exploitation has been reported as of now.

What should organizations do to mitigate this risk?

Organizations should apply the recommended patches and review their security configurations.

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…