CVE-2026-17069 is a CSRF vulnerability in IBM i versions 7.3 through 7.6 where improper validation of anti-CSRF tokens enables a remote authenticated attacker to bypass security restrictions. The vulnerability does not require user interaction and has a CVSS v3.1 base score of 8.1, indicating high impact on confidentiality and integrity. The vendor has not yet published an official fix or remediation level, and no known exploits are reported in the wild.

Successful exploitation allows a remote authenticated attacker to bypass security restrictions, potentially leading to unauthorized actions that compromise confidentiality and integrity of the affected system. Availability impact is not affected. The vulnerability requires attacker authentication but no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to affected IBM i versions and monitoring for suspicious authenticated activity related to CSRF attacks.