8.3High

CVE-2026-93886IBM i is Affected By An Improper Neutralization of Input Vulnerability in HTTP Server Administration GUI

IBM i Published: 2026-10-13 02:22 (1 month ago)

Description

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input.

Weakness (CWE): CWE-79

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
IBM	i	7.6, 7.5, 7.4, 7.3

References and patches

https://www.ibm.com/support/pages/node/7291760 vendor-advisorypatchPatchVendor Advisory

CPE matches (NVD) (1)

cpe:2.3:o:ibm:i:*:*:*:*:*:*:*:* ≥ 7.3 ≤ 7.6

CVSS score

8.3High

Source: ibm · CVSS 3.1

Attack vector: Network
Attack complexity: Low
Privileges required: High
User interaction: Required
Scope: Changed
Confidentiality: High
Integrity: High
Availability: Low

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L

All scores (3)

cna	CVSS 3.1	8.3High
psirt@us.ibm.com	CVSS 3.1	8.3High
nvd	CVSS 3.1	5.4Medium

EPSS (chance of exploitation in 30 days)

0.19%

higher than 9% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: no
Technical impact: total

Timeline

ID reserved2026-09-18
Published2026-10-13 02:22
Reached IP-DB2026-10-24 23:47
Last updated2026-10-15 02:48

Assigned by (CNA): ibm
NVD status: Analyzed

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time