CVE-2026-17068

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-17068", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-07-24T14:02:31.328Z", "datePublished": "2026-10-16T18:39:45.465Z", "dateUpdated": "2026-10-16T21:16:16.013Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-10-16T18:39:45.465Z"}, "title": "IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-285", "description": "CWE-285 Improper Authorization", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}], "cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7292423", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 5.4, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"}}], "solutions": [{"lang": "en", "value": "Application of the PTFs require additional actions that if not taken will cause existing NFS mounts to become inaccessible. View each PTF's cover letter for the additional actions required prior to installation.\n\nIBM i Release5770-SS1\u00a0\nPTF Number(s)PTF Download Link(s)7.6SJ11753 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11753 7.5SJ11790 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11790 7.4SJ11802 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11802 7.3SJ11804 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11804 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Application of the PTFs require additional actions that if not taken will cause existing NFS mounts to become inaccessible. View each PTF's cover letter for the additional actions required prior to installation.</p><div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-SS1\u00a0<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ11753</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11753\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11753</a></td></tr><tr><td>7.5</td><td>SJ11790</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11790\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11790</a></td></tr><tr><td>7.4</td><td>SJ11802</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11802\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11802</a></td></tr><tr><td>7.3</td><td>SJ11804</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11804\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11804</a></td></tr></tbody></table></div><p>IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-16T19:34:19.947700Z", "id": "CVE-2026-17068", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T21:16:16.013Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-17068", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-16T19:34:19.947700Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T19:34:20.954Z"}}], "cna": {"title": "IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}]}], "solutions": [{"lang": "en", "value": "Application of the PTFs require additional actions that if not taken will cause existing NFS mounts to become inaccessible. View each PTF's cover letter for the additional actions required prior to installation.\n\nIBM i Release5770-SS1\u00a0\nPTF Number(s)PTF Download Link(s)7.6SJ11753 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11753 7.5SJ11790 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11790 7.4SJ11802 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11802 7.3SJ11804 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11804 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "value": "<p>Application of the PTFs require additional actions that if not taken will cause existing NFS mounts to become inaccessible. View each PTF's cover letter for the additional actions required prior to installation.</p><div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-SS1\u00a0<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ11753</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11753\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11753</a></td></tr><tr><td>7.5</td><td>SJ11790</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11790\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11790</a></td></tr><tr><td>7.4</td><td>SJ11802</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11802\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11802</a></td></tr><tr><td>7.3</td><td>SJ11804</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11804\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11804</a></td></tr></tbody></table></div><p>IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7292423", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-285", "description": "CWE-285 Improper Authorization"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-10-16T18:39:45.465Z"}}}, "cveMetadata": {"cveId": "CVE-2026-17068", "state": "PUBLISHED", "dateUpdated": "2026-10-16T21:16:16.013Z", "dateReserved": "2026-07-24T14:02:31.328Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-10-16T18:39:45.465Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*"], "product": "i", "vendor": "IBM", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "matchCriteriaId": "DD4F4919-D935-4B81-B4E8-0E0F2DAC09B1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "matchCriteriaId": "AE2B298C-E1F6-43BD-A5EF-83964C6669CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "matchCriteriaId": "88B74622-BDB2-43AE-A91F-FADEC4B64B4F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "matchCriteriaId": "8C189EC3-7D9F-4303-BB5C-1013FAE59B1E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag."}], "id": "CVE-2026-17068", "lastModified": "2026-10-23T16:03:36.963", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "psirt@us.ibm.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-17068", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T19:34:19.947700Z", "version": "2.0.3"}}]}, "published": "2026-10-16T19:17:06.063", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7292423"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-285"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.3"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "i", "source": "cna", "vendor": "IBM"}, "product": "i", "vendor": "ibm"}], "created": "2026-10-16T20:45:16.955046+00:00", "updated": "2026-10-17T21:00:13.784843+00:00", "vendors": ["ibm", "ibm$PRODUCT$i"]}