CVE Catalog
CVE-2026-17266
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.44%
36th percentile - higher than 36% of all known CVEs
Summary
IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
Risk Assessment
An attacker could read confidential files, potentially leading to data leakage and compliance violations.
Recommendation
Apply IBM i patches and configure proper directory access permissions.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.