EUVD-2026-77780
GHSA-g6pp-gcgv-5h84
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary rating from Vendor (ibm) · only source for this CVE.
CVSS VectorVendor: ibm
Lifecycle Timeline
1DescriptionCVE.org
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to gain access to sensitive information through session IP binding bypass in Navigator for i.
AnalysisAI
IBM i Navigator for i — the browser-based administration console shipped with IBM i 7.3, 7.4, 7.5 and 7.6 — can be made to ignore the binding that ties an administrative session to the client's source IP address, allowing a remote, unauthenticated attacker (CVSS PR:N/UI:N) to reach sensitive information that should have been confined to a legitimate session. IBM scores the exposure 5.3 with confidentiality-only impact (C:L/I:N/A:N), consistent with a targeted information disclosure rather than a full compromise of the host. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-290 – Authentication Bypass by Spoofing
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today