What is the CVSS score of EUVD-2026-71483?

EUVD-2026-71483 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for EUVD-2026-71483?

Yes, a patch is available for EUVD-2026-71483. Update the affected software to the latest version immediately.

IBM i EUVD-2026-71483

| CVE-2026-16941 MEDIUM

Incorrect Authorization (CWE-863)

2026-09-04 ibm

GHSA-c96p-5383-3rqm

IBM

4.3

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

vuln.today AI

4.3 MEDIUM

Requires authenticated low-privilege network access (PR:L, AV:N); only system message integrity is affected, with no confidentiality or availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Metadata Corrected

Sep 04, 2026 - 17:40 vuln.today

tag: Authentication Bypass removed

Analysis Generated

Sep 04, 2026 - 17:39 vuln.today

DescriptionCVE.org

IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper authorization.

AnalysisAI

Incorrect authorization in IBM i 7.4, 7.5, and 7.6 permits remote authenticated users with low privileges to modify certain system messages beyond their intended permission scope. The flaw is rooted in CWE-863 (Incorrect Authorization), where the platform performs an authorization check but does so inadequately, allowing privilege overstep without authentication bypass. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	The attacker must possess a valid low-privilege IBM i user account (confirmed by PR:L in the CVSS vector). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	CVSS 4.3 (Medium) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N reflects the limited scope accurately. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Apply the IBM-issued patch via the vendor advisory at https://www.ibm.com/support/pages/node/7285848; the exact PTF numbers for affected releases 7.4, 7.5, and 7.6 are specified there. … Detailed patch versions, workarounds, and compensating controls in full report.