CVE-2026-17203

HighCVSS 7.5

Published: 28/08/2026(UTC)Translated: 29/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

35th percentile - higher than 35% of all known CVEs

Summary

IBM Administration Runtime Expert for i 1R1M0 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement.

Risk Assessment

An authenticated attacker could access sensitive data, potentially compromising organizational information security.

Recommendation

Upgrade IBM Administration Runtime Expert for i to a patched version and review access policies.

Other vulnerabilities in IBM Administration Runtime Expert for i

CVE-2026-18527Critical
IBM Administration Runtime Expert for i (ARE) version 1R1M0 could allow a remote attacker to gain elevated privileges due to ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticated profile, gaining elevated privileges on the IBM i system.

Original NVD description (English source)

IBM Administration Runtime Expert for i 1R1M0 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement.