CVE-2026-17275
Low · 3.7CVSS
3.7
EPSS
0.2%
Published
Oct 16, 2026
CISA due date
—
The record
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-62989 Shopper is a Headless e-commerce Admin Panel. CWE-285
- CVE-2026-119330 Immich is a high-performance self-hosted photo and video management solution. CWE-285
- CVE-2026-55551 ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case… CWE-285
- CVE-2026-112905 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or… CWE-285
- CVE-2026-104316 IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any… CWE-285
- CVE-2026-113696 Improper authorization in the SmartIT change approval feature of BMC IT Service… CWE-285
- CVE-2026-113694 Improper authorization in the SmartIT user attachment feature of BMC IT Service… CWE-285
- CVE-2026-42949 A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA… CWE-285