CVE Catalog

CVE-2026-16904

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.52%

42th percentile - higher than 42% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized commands, potentially leading to system integrity compromise.

Recommendation

Apply security patches from IBM and restrict access to monitor management functions to trusted administrators only.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS