EUVD-2026-57381
GHSA-r7h8-p6qj-6ggm
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Network-reachable, low-complexity exploit requiring only authenticated low-privilege access; scope change reflects cross-security-domain memory read with no integrity or availability impact.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.
AnalysisAI
Out-of-bounds read in IBM i 7.3 through 7.6 enables remote authenticated attackers with low-privilege credentials to obtain sensitive information across a security scope boundary, yielding a high confidentiality impact. The CVSS vector (S:C/C:H) indicates the leaked data can originate from components outside the attacker's immediate security context - a notable escalation beyond typical information disclosure. No public exploit code has been identified at time of analysis, and IBM has released a patch via advisory 7283280.
Technical ContextAI
IBM i (formerly known as OS/400 and i5/OS) is IBM's proprietary operating system for IBM Power Systems, used heavily in enterprise workloads in finance, manufacturing, and retail. The root cause is CWE-125 (Out-of-Bounds Read): a memory access operation reads past the end of an allocated buffer, exposing adjacent memory contents to the caller. In IBM i's tightly compartmentalized security model - where objects and security domains are strictly separated - an out-of-bounds read that crosses a scope boundary (reflected by S:C in the CVSS vector) is particularly significant, as it may expose data from security contexts the authenticated user should not be able to access. The affected CPE is cpe:2.3:a:ibm:i:*:*:*:*:*:*:*:* covering versions 7.3, 7.4, 7.5, and 7.6.
RemediationAI
IBM has released a patch, confirmed available via the vendor advisory at https://www.ibm.com/support/pages/node/7283280. Administrators should apply the relevant PTFs (Program Temporary Fixes) for their IBM i version (7.3, 7.4, 7.5, or 7.6) as directed by that advisory - the exact PTF numbers and cumulative fix levels are detailed there. If immediate patching is not feasible, a compensating control is to restrict network access to IBM i services to only trusted, explicitly authorized users and hosts at the network layer (e.g., firewall rules limiting access to IBM i ports), which reduces the exposed attack surface without eliminating the vulnerability. Note that restricting access does not eliminate the flaw for internal or VPN-connected authenticated users. No specific workarounds were identified in the available data beyond access restriction.
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today