CVE-2026-17417

HighCVSS 8.8

Published: 12/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

34th percentile - higher than 34% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters.

Risk Assessment

An attacker could execute arbitrary commands on the system, potentially leading to compromise of data confidentiality, integrity, and availability.

Recommendation

Install security patches from IBM and restrict access to command injection vulnerable interfaces.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters.