EUVD-2026-58467
GHSA-47cc-pf2h-j2xj
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Mirrors IBM's remote unauthenticated scope-changed rating given the stated address-validation bypass, though the sparse description leaves PR:N as vendor-asserted rather than independently confirmed.
Primary rating from Vendor (ibm).
CVSS VectorNVD
Lifecycle Timeline
6DescriptionNVD
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of user-controlled addresses.
AnalysisAI
Security-restriction bypass in IBM i (the operating system for IBM Power servers, formerly OS/400) versions 7.3 through 7.6 lets a remote attacker abuse improper validation of user-controlled addresses to elevate privileges and cross a security boundary. Vendor scoring rates this a maximum-severity, unauthenticated network flaw (CVSS 10.0, scope-changed), though there is no public exploit identified at time of analysis and EPSS exploitation probability is low (0.33%). IBM published a fix, and CISA's SSVC framework currently marks exploitation as 'none' with a 'total' technical impact.
Technical ContextAI
IBM i is IBM's integrated midrange operating system running on Power hardware, widely used for ERP and transactional workloads in banking, insurance, manufacturing, and retail. The root cause maps to CWE-269 (Improper Privilege Management): the system fails to correctly validate addresses supplied or influenced by a user, and that improper validation is leveraged to bypass security restrictions. In practice this is a privilege-management/escalation defect (vendor tag: Privilege Escalation) where trust boundaries enforced by the OS can be circumvented, and the CVSS scope change (S:C) indicates the impact reaches components beyond the initially vulnerable one.
RemediationAI
Patch available per vendor advisory: apply the IBM-provided fix documented at https://www.ibm.com/support/pages/node/7283283 for your specific IBM i release (7.3, 7.4, 7.5, or 7.6); the input does not include an exact PTF/fix identifier, so consult that advisory for the precise PTF group or cumulative package required for your version. An exact patched version string was not provided in the input data and should not be assumed. Until the fix is applied, reduce exposure by restricting network reachability to IBM i services (limit access to trusted management networks and required application clients via firewall/host tables), tightening user profile authorities and object-level authority to limit what a bypass could reach, and increasing audit journaling (QAUDJRN) to detect anomalous privilege changes - noting the trade-off that aggressive network restriction can disrupt legitimate remote application and administration traffic.
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today