CVE-2026-16867

HighCVSS 8.1

Published: 13/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 14/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

33th percentile - higher than 33% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 contain an improper authentication vulnerability during NTLM session negotiation, which could allow a remote attacker to access server resources with the privileges of an authenticated user.

Risk Assessment

An attacker could gain unauthorized access to server resources, potentially leading to data confidentiality and integrity breaches.

Recommendation

Install IBM patches and consider strengthening NTLM authentication mechanisms.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation.