IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
IBM i affected
Version Status Constraints
7.6 affected —
7.5 affected —
7.4 affected —
7.3 affected —

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Ibm Subscribe
I Subscribe

Project Subscriptions

Vendors Products
Ibm Subscribe
I Subscribe
Advisories

No advisories yet.

Fixes

Solution

IBM i Release5770-SS1 PTF Number(s)PTF Download Link(s)7.6SJ09689 SJ09666 SJ10017 SJ09859 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09689 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09666 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10017 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09859 7.5SJ09688 SJ09665 SJ09699 SJ10015 SJ09855 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09688 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09665 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09699 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10015 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09855 7.4SJ09690 SJ09664 SJ09701 SJ10028 SJ09851 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09690 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09664 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09701 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10028 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09851 7.3SJ09691 SJ09663 SJ10018 SJ09837 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09691 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09663 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10018 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09837 IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.

Workaround

No workaround given by the vendor.

References
Link Providers
https://www.ibm.com/support/pages/node/7275756 cve-icon cve-icon
History

Thu, 11 Jun 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 11 Jun 2026 15:30:00 +0000

Type Values Removed Values Added
Description IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.
Title IBM i is Affected by Privilege Escalation []
First Time appeared Ibm
Ibm i
Weaknesses CWE-427
CPEs cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm i
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-06-11T15:30:41.132Z

Reserved: 2026-05-05T14:09:09.453Z

Link: CVE-2026-7870

cve-icon Vulnrichment

Updated: 2026-06-11T15:30:37.662Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-06-11T16:16:25.220

Modified: 2026-06-11T20:56:29.653

Link: CVE-2026-7870

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-11T21:30:05Z

Weaknesses