Skip to content
Sign in
3.6 Low

CVE-2026-102618 IBM i is Affected by a Protection Mechanism Failure

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated user to indirectly disable system auditing, which they otherwise don't have authority to disable.

CVSS 3.1 detail

Vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

Exploitable with local access to the machine, with an ordinary account and without any user action; the impact on data or service is limited.

Attack vector
Local
Attack complexity
High
Privileges required
Low
Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
Low

Affected products and versions

Product Affected versions Fixed in
i 7.6 No fix stated
i 7.5 No fix stated
i 7.4 No fix stated
i 7.3 No fix stated

Other CVEs of i

The 215 CVEs of i →
CVE-2026-93744 IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to… 6.5 Medium CVE-2026-17068 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement… 5.4 Medium CVE-2026-17073 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree… 5.4 Medium CVE-2026-17275 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed… 3.7 Low
Track this CVE