What is the CVSS score of CVE-2026-17029?

CVE-2026-17029 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of IBM i are affected by CVE-2026-17029?

CVE-2026-17029 affects IBM i systems versions 7.3 through 7.6 and allows users with basic system access to gain administrative control and fully compromise affected systems.. A patch is available.

How to fix or mitigate CVE-2026-17029?

Within 24 hours, audit all IBM i systems to identify instances running versions 7.3 through 7.6 and document their business criticality and data classification. Within 7 days, obtain the IBM security patch from IBM's support portal and apply it to non-production test environments to validate compatibility with existing configurations and applications. Within 30 days, deploy the patch to all production IBM i systems, prioritizing those with the highest data sensitivity and public-facing exposure, and verify successful patch installation across the entire estate.

IBM i CVE-2026-17029

EUVD-2026-58386 HIGH

Out-of-bounds Write (CWE-787)

2026-08-13 ibm

GHSA-wffc-v42m-c6j8

RCE Buffer Overflow Memory Corruption IBM

8.8

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

8.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Local low-privilege access sufficient (AV:L/PR:L); scope change warranted by execution in a higher-privileged component; arbitrary code execution yields full C/I/A impact.

3.1 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 13, 2026 - 20:43 vuln.today

CVE Published

Aug 13, 2026 - 19:54 nvd

HIGH 8.8

DescriptionCVE.org

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out-of-bounds write.

AnalysisAI

Out-of-bounds write in IBM i 7.3 through 7.6 enables a local low-privileged attacker to execute arbitrary code, with scope change (S:C) indicating the exploit crosses a security boundary into a higher-privileged component - achieving full confidentiality, integrity, and availability impact. The CVSS score of 8.8 reflects the severity of privilege escalation potential despite requiring local access. No public exploit has been identified at time of analysis, and IBM has released a patch via their support portal.

Technical ContextAI

IBM i (formerly AS/400, iSeries, System i) is IBM's proprietary integrated operating environment running on IBM Power Systems hardware, widely used by large enterprises for mission-critical business workloads. The vulnerability is classified as CWE-787 (Out-of-Bounds Write), a memory corruption class where a program writes data past the boundary of an allocated buffer, potentially overwriting adjacent memory regions including return addresses, function pointers, or control structures. This corruption can redirect execution flow to attacker-controlled code. The CPE cpe:2.3:a:ibm:i:*:*:*:*:*:*:*:* covers all sub-versions of IBM i across the four major releases (7.3, 7.4, 7.5, 7.6). The specific subsystem or component containing the vulnerable code path is not identified in available data.

RemediationAI

Apply the vendor-released patch per IBM's official advisory at https://www.ibm.com/support/pages/node/7283285 for all affected IBM i releases (7.3, 7.4, 7.5, 7.6). Exact PTF identifiers and installation instructions are detailed in that advisory. A patched version number was not independently confirmed from the available data - consult the advisory directly for specific fix levels. If immediate patching is not feasible, reduce exposure by restricting interactive local logon and command-line access to IBM i systems to only essential administrative personnel, noting that this may impact legitimate operator workflows. Audit and minimize low-privileged user accounts that have shell or command execution capabilities on IBM i, as PR:L indicates a standard user account is sufficient to trigger the flaw. Monitor IBM i system logs for anomalous privilege escalation events as a detective compensating control.