CVE-2026-7870 - Vulnerability Details - OpenCVE

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Ibm	I

No data.

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7275756

History

Thu, 11 Jun 2026 16:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 11 Jun 2026 15:30:00 +0000

Type	Values Removed	Values Added
Description		IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.
Title		IBM i is Affected by Privilege Escalation []
First Time appeared		Ibm Ibm i
Weaknesses		CWE-427
CPEs		cpe:2.3:a:ibm:i:7.3.0:::::::* cpe:2.3:a:ibm:i:7.4.0:::::::* cpe:2.3:a:ibm:i:7.5.0:::::::* cpe:2.3:a:ibm:i:7.6.0:::::::*
Vendors & Products		Ibm Ibm i
References		https://www.ibm.com/support/pages/node/7275756
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-06-11T14:34:34.482Z

Updated: 2026-06-11T15:30:41.132Z

Reserved: 2026-05-05T14:09:09.453Z

Link: CVE-2026-7870

Vulnrichment

Updated: 2026-06-11T15:30:37.662Z

NVD

Status : Received

Published: 2026-06-11T16:16:25.220

Modified: 2026-06-11T16:16:25.220

Link: CVE-2026-7870

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-7870", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-05-05T14:09:09.453Z", "datePublished": "2026-06-11T14:34:34.482Z", "dateUpdated": "2026-06-11T15:30:41.132Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-06-11T14:34:34.482Z"}, "title": "IBM i is Affected by Privilege Escalation []", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-427", "description": "CWE-427 Uncontrolled Search Path Element", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}], "cpes": ["cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7275756", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "IBM i Release5770-SS1\nPTF Number(s)PTF Download Link(s)7.6SJ09689\nSJ09666\nSJ10017\nSJ09859 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09689 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09666 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10017 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09859 7.5SJ09688\nSJ09665\nSJ09699\nSJ10015\nSJ09855 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09688 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09665 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09699 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10015 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09855 7.4SJ09690\nSJ09664\nSJ09701\nSJ10028\nSJ09851 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09690 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09664 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09701 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10028 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09851 \n7.3SJ09691\nSJ09663\nSJ10018\nSJ09837\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09691 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09663 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10018 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09837 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-SS1<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ09689<br/>SJ09666<br/>SJ10017<br/>SJ09859</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09689\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09689</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09666\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09666</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10017\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10017</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09859\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09859</a></td></tr><tr><td>7.5</td><td>SJ09688<br/>SJ09665<br/>SJ09699<br/>SJ10015<br/>SJ09855</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09688\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09688</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09665\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09665</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09699\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09699</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10015\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10015</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09855\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09855</a></td></tr><tr><td>7.4</td><td>SJ09690<br/>SJ09664<br/>SJ09701<br/>SJ10028<br/>SJ09851</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09690\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09690</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09664\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09664</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09701\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09701</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10028\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10028</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09851\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09851</a><br/></td></tr><tr><td>7.3</td><td>SJ09691<br/>SJ09663<br/>SJ10018<br/>SJ09837<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09691\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09691</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09663\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09663</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10018\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10018</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09837\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09837</a></td></tr></tbody></table></div><p>IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>"}]}], "x_generator": {"engine": "ibm-cvegen"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-11T15:30:24.395664Z", "id": "CVE-2026-7870", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-11T15:30:41.132Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-7870", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-05-05T14:09:09.453Z", "datePublished": "2026-06-11T14:34:34.482Z", "dateUpdated": "2026-06-11T15:30:41.132Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-06-11T14:34:34.482Z"}, "title": "IBM i is Affected by Privilege Escalation []", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-427", "description": "CWE-427 Uncontrolled Search Path Element", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}], "cpes": ["cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7275756", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "IBM i Release5770-SS1\nPTF Number(s)PTF Download Link(s)7.6SJ09689\nSJ09666\nSJ10017\nSJ09859 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09689 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09666 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10017 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09859 7.5SJ09688\nSJ09665\nSJ09699\nSJ10015\nSJ09855 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09688 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09665 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09699 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10015 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09855 7.4SJ09690\nSJ09664\nSJ09701\nSJ10028\nSJ09851 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09690 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09664 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09701 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10028 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09851 \n7.3SJ09691\nSJ09663\nSJ10018\nSJ09837\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09691 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09663 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10018 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09837 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-SS1<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ09689<br/>SJ09666<br/>SJ10017<br/>SJ09859</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09689\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09689</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09666\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09666</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10017\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10017</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09859\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09859</a></td></tr><tr><td>7.5</td><td>SJ09688<br/>SJ09665<br/>SJ09699<br/>SJ10015<br/>SJ09855</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09688\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09688</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09665\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09665</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09699\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09699</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10015\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10015</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09855\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09855</a></td></tr><tr><td>7.4</td><td>SJ09690<br/>SJ09664<br/>SJ09701<br/>SJ10028<br/>SJ09851</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09690\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09690</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09664\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09664</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09701\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09701</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10028\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10028</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09851\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09851</a><br/></td></tr><tr><td>7.3</td><td>SJ09691<br/>SJ09663<br/>SJ10018<br/>SJ09837<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09691\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09691</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09663\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09663</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10018\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10018</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09837\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09837</a></td></tr></tbody></table></div><p>IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>"}]}], "x_generator": {"engine": "ibm-cvegen"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-7870", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-11T15:30:24.395664Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-11T15:30:37.662Z"}}]}}