CVE-2026-16987

HighCVSS 8.8

Published: 13/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 14/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

2th percentile - higher than 2% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper validation of the LANG environment variable.

Risk Assessment

A local attacker could gain elevated privileges, potentially leading to unauthorized access to sensitive data and the system.

Recommendation

Apply security patches from IBM and restrict local access to the system to trusted users only.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper validation of the LANG environment variable.