CVE-2026-17262 is an OS command injection vulnerability affecting IBM i versions 7.3, 7.4, 7.5, and 7.6. The issue arises from improper neutralization of special elements in FTP authentication commands, which could be exploited by a local attacker to cause a denial of service condition. The CVSS v3.1 base score is 5.4, indicating a medium severity level. There is no indication of confidentiality impact, but integrity and availability impacts are present. No known exploits are reported in the wild, and no patch or vendor advisory information is provided in the input data.

A local attacker could leverage this vulnerability to cause denial of service on affected IBM i systems by exploiting improper validation of FTP authentication commands. There is no reported impact on confidentiality, but integrity and availability could be affected. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, administrators should monitor IBM's security advisories for updates. Until a fix is available, restricting local access and controlling FTP authentication command usage may reduce risk.