EUVD-2026-77765
GHSA-6j4g-7933-5cfh
Severity by source
AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Network-accessible WebSocket handshake but a timing race (AC:H) and mandatory low-privileged credentials (PR:L); only low confidentiality impact.
Primary rating from Vendor (ibm).
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition during the WebSocket handshake process.
AnalysisAI
A race condition in the IBM i WebSocket handshake process allows a remote authenticated attacker to obtain sensitive information on IBM i 7.6, 7.5, 7.4, and 7.3. The flaw requires valid credentials and a precisely timed concurrent request pattern (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N, base 4.2), so it is a low-severity, non-automatable issue rather than a mass-exploitation candidate. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires: (1) network reachability to an IBM i system that has WebSocket handshake handling enabled and exposed - if WebSocket services are not configured or not reachable, the flaw cannot be triggered; (2) valid authenticated access with at least low privileges (the CVSS vector specifies PR:L, so credentials are mandatory); and (3) the ability to generate concurrent, precisely interleaved handshake requests and win a timing window, which the CISA SSVC record marks as not automatable. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals here are mutually consistent and point to low real-world priority. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released fixes are available: IBM has published a patch advisory at https://www.ibm.com/support/pages/node/7286974, and administrators should apply the indicated PTF (program temporary fix) level for their IBM i release (7.3, 7.4, 7.5, or 7.6) as the primary remediation. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-362 – Race Condition
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today