CVE Catalog
CVE-2026-16906
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.51%
41th percentile - higher than 41% of all known CVEs
Summary
IBM i versions 7.6 and 7.5 could allow a remote authenticated attacker to execute arbitrary commands with elevated privileges due to improper neutralization of special elements used in an OS command.
Risk Assessment
An attacker could gain elevated privileges and take control of the system, posing a serious security threat.
Recommendation
Apply security patches from IBM and restrict remote user privileges to the minimum necessary.
Original NVD description (English source)
IBM i 7.6, and 7.5 could allow a remote authenticated attacker to execute arbitrary commands with elevated privileges due to improper neutralization of special elements used in an OS command.