CVE-2026-93744Medium· 6.5▾ SunlitIBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to a…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 21.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.4%
0.4% → 0.4%
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability to alter server-side session security state.
i 7.6i 7.5i 7.4i 7.3IBM i Release5770-SS1 Option 3 PTF Number(s)PTF Download Link(s)7.6SJ11740 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11740 7.5SJ11745 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11745 7.4SJ11746 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11746 7.3SJ11747 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11747
IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-17488Medium· 4.3IBM i is Affected By An Improper Authentication Vulnerability in SST / DST
CVE-2026-18221High· 8.1IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper validation of client-supplied authentication parameters.
CVE-2026-16892Medium· 5.4IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching.
CVE-2026-107400High· 8.8Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication
CVE-2026-102917High· 7.8IBM i is Affected By An Improper Privilege Management Vulnerability
CVE-2026-17073Medium· 5.4IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System