CVE-2026-16967

A time-of-check to time-of-use (TOCTOU) race condition in IBM i versions 7.3 through 7.6 allows remote authenticated attackers to exploit symbolic links, potentially granting them unauthorized access to system objects. This vulnerability poses a high risk, particularly for organizations using affected IBM i systems, as it could lead to data breaches or unauthorized system manipulation. IT security teams managing these systems should prioritize immediate remediation efforts to mitigate potential exploitation.