CVE-2026-16856

HighCVSS 8.8

Published: 12/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

27th percentile - higher than 27% of all known CVEs

Summary

IBM i versions 7.6 and 7.5 contain a vulnerability that could allow a local attacker to gain elevated privileges due to improper neutralization of special elements used in OS commands.

Risk Assessment

A local attacker could gain elevated privileges, potentially leading to full system compromise and access to sensitive data.

Recommendation

Apply patches provided by IBM for i 7.6 and 7.5. Restrict local access to the system to trusted users only.

Original NVD description (English source)

IBM i 7.6, and 7.5 could allow a local attacker to gain elevated privileges due to improper neutralization of special elements used in an OS command.