IBM i CVE-2026-16867

Exploitation requires network reachability to the IBM i service that performs NTLM session negotiation - the specific feature named in the description. The attacker does not need credentials, user interaction, or prior privileges (PR:N/UI:N), so an exposed NTLM/SMB negotiation endpoint on IBM i 7.3-7.6 is the core prerequisite. Limiting factors that reduce realistic risk: NTLM negotiation must be enabled and reachable on the target (not universally internet-exposed), only IBM i releases 7.3 through 7.6 are affected, and SSVC assesses the attack as not automatable, indicating it does not scale trivially. Resulting access is bounded to the privileges of an authenticated user rather than full administrative/system authority.

The signals are mixed and warrant judgment. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N with C:H/I:H/A:H) rates this 9.8 Critical, and SSVC assesses Technical Impact as 'total', which aligns with an authentication bypass granting full user-level access. However, SSVC records Exploitation as 'none' and Automatable as 'no', and EPSS is low at 0.40% (33rd percentile), indicating no observed exploitation and modest near-term probability. The lack of KEV listing and no public POC further temper urgency. The most likely reconciling interpretation: this is a genuinely serious pre-authentication flaw whose real-world exploitation is constrained by the fact that NTLM negotiation must be reachable and enabled on the target IBM i host, which is not a ubiquitous default-exposed service on the internet. Priority should be high for organizations that expose IBM i NTLM/SMB-based services to untrusted networks, and moderate for isolated internal deployments. Note the tension: a 9.8 CVSS versus SSVC 'Automatable: no' suggests exploitation is not trivially scalable despite the high severity.

A remote attacker with network access to an IBM i host initiates an NTLM session negotiation and manipulates the handshake so the server improperly accepts it as an authenticated user's session, then accesses server resources at that user's privilege level without ever supplying valid credentials. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N, no authentication, user interaction, or elevated privileges are required, but the attacker must be able to reach the NTLM negotiation endpoint. No public exploit code has been identified at time of analysis.