CVE Catalog
CVE-2026-17420
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk0.28%
20th percentile - higher than 20% of all known CVEs
Summary
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements in an SQL parameter.
Risk Assessment
The risk is the possibility of security bypass by an authenticated user, which could lead to unauthorized access to or manipulation of data.
Recommendation
It is recommended to apply patches provided by IBM for IBM i and review and strengthen input validation in applications using SQL.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements in an SQL parameter.