CVE Catalog
CVE-2026-16967
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk0.25%
16th percentile - higher than 16% of all known CVEs
Summary
IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to system objects due to a time-of-check to time-of-use (TOCTOU) race condition involving symbolic links.
Risk Assessment
An attacker could gain unauthorized access to sensitive system objects, potentially leading to confidentiality and integrity breaches.
Recommendation
Apply security patches from IBM and restrict remote user privileges to the minimum necessary.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to system objects due to a time-of-check to time-of-use (TOCTOU) race condition involving symbolic links.