CVE-2026-16674

HighCVSS 8.8

Published: 13/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 14/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

34th percentile - higher than 34% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 contain an untrusted search path vulnerability that could allow a remote authenticated attacker to execute arbitrary code.

Risk Assessment

An attacker could run malicious code in the system context, potentially leading to full system compromise.

Recommendation

Apply IBM patches and ensure search paths are secure.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an untrusted search path.