OCTOBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-17487

MEDIUM · CVSS 5.3 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-10-13 · Last synced 2026-10-15

CyberRota Analysis

AI-Generated

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to a remote enumeration attack that can reveal user profiles through distinct error codes returned during the sign-on process. This vulnerability could facilitate further attacks by exposing valid usernames to malicious actors. Organizations using these IBM i versions should prioritize remediation to protect against potential unauthorized access.

CVE
CVE-2026-17487
Severity
MEDIUM
CVSS
5.3
EPSS
0.24%

Original NVD Description

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process.

Related CVEs

Other vulnerabilities affecting the same vendor(s)