IBM i versions 7.3 through 7.6 contain a vulnerability classified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command), which could allow a remote authenticated attacker to cause a denial of service. The issue arises from improper handling of special elements in OS commands, potentially leading to command injection that disrupts system availability. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact. No known exploits are reported in the wild, and no vendor-provided patch or mitigation is currently documented.

The vulnerability can be exploited by a remote authenticated attacker to cause denial of service, impacting system availability. There is no impact on confidentiality, and only limited impact on integrity is indicated. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, monitor IBM's advisories for updates. Restrict remote authenticated access where possible to reduce exposure.