CVE Catalog
CVE-2026-16860
CriticalCVSS 9.9Summary
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element.
Risk Assessment
The risk for the organization is remote code execution, which can lead to compromise of the IBM i system.
Recommendation
It is recommended to apply security patches provided by IBM and review search path configurations in the system.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element.