Description
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input.
Published: 2026-10-12
Score: 8.3 High
EPSS: n/a
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now. IBM i Release5770-SS1 PTF Number(s)PTF Download Link(s)7.6SJ11645 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11645 7.5SJ11644 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11644 7.4SJ11643 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11643 7.3SJ11641 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11641 IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 12 Oct 2026 23:45:00 +0000

Type Values Removed Values Added
Description IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input.
Title IBM i is Affected By An Improper Neutralization of Input Vulnerability in HTTP Server Administration GUI
First Time appeared Ibm
Ibm i
Weaknesses CWE-79
CPEs cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm i
References
Metrics cvssV3_1

{'score': 8.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L'}

Subscriptions

Ibm I
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-10-12T23:22:16.102Z

Reserved: 2026-09-18T20:15:17.954Z

Link: CVE-2026-93886

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses