CVE-2026-2311 — IBM i is affected by a privilege escalation vulnerability in Web Administration GUI []

CVE-2026-2311

IBM i is affected by a privilege escalation vulnerability in Web Administration GUI [] PUBLISHED

Description (CNA)

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check. A malicious actor could cause user-controlled code to run with administrator privilege.

Affected (CNA)

Vendor / product	Versions
IBM / i	affected 7.6.0 through 2.3.0; affected 7.5.0; affected 7.4.0; affected 7.3.0; affected 7.2.0

CWE

CWE-284

References

https://www.ibm.com/support/pages/node/7269560

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.