CVE-2026-17276

IBM i 7.3-7.6 privilege escalation flaw allows authenticated remote attackers to escalate privileges via improper high-authority thread handling.

A remote authenticated attacker can escalate privileges on IBM i systems due to improper authorization in high-authority thread handling. DIB organizations must patch this critical flaw to prevent privilege escalation and maintain compliance with NIST 800-171 controls requiring timely patching of known vulnerabilities.

Shame score — A critical CVSS 9.6 privilege escalation flaw in IBM i systems that was not actively exploited but still represents a significant avoidable risk for unpatched enterprise environments.