CVE-2026-17075 is an improper authentication vulnerability (CWE-287) affecting IBM i versions 7.3, 7.4, 7.5, and 7.6. The flaw arises from improper validation of authentication tokens, which could enable a remote attacker to gain unauthorized access to sensitive information and perform unauthorized actions on the affected systems. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and no availability impact. As of the published date, no official patch or remediation level has been disclosed by IBM.

The vulnerability allows remote attackers to bypass proper authentication mechanisms, potentially leading to unauthorized disclosure of sensitive information and limited unauthorized operations. The confidentiality impact is high, while integrity impact is low and availability is unaffected. This could compromise data confidentiality on affected IBM i systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is currently available, monitor IBM's advisories for updates. Until a patch is released, consider restricting network access to affected systems and applying compensating controls to limit exposure to remote attackers.