CVE-2026-16896

HighCVSS 7.1

Published: 13/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 14/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

0th percentile - higher than 0% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 contain a TOCTOU race condition vulnerability that could allow a local authenticated attacker to obtain unauthorized access to files.

Risk Assessment

An attacker could exploit the race between check and use to gain access to data they are not authorized to see.

Recommendation

Apply IBM patches and consider implementing additional file access control mechanisms.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use (TOCTOU) race condition.