CVE-2026-17445 is a vulnerability in IBM i versions 7.3 through 7.6 where improper validation of an attacker-supplied user profile name enables a remote authenticated attacker to bypass security restrictions. This weakness corresponds to CWE-250 (Execution with Unnecessary Privileges). The CVSS v3.1 base score is 8.2, indicating a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact but limited integrity impact and no availability impact.

An attacker who is authenticated remotely can bypass security controls due to improper validation of user profile names, potentially gaining unauthorized access to sensitive information (high confidentiality impact) and limited ability to modify data (low integrity impact). There is no impact on system availability. This could lead to unauthorized disclosure of information or partial compromise of system security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Organizations should monitor IBM's advisories for updates and apply patches or mitigations once available.