CVE-2026-16987

EUVD-2026-58385
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper validation of the LANG environment variable.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
ibmCNA
8.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
ibmi
7.6
CNA
ibmi
7.5
CNA
ibmi
7.4
CNA
ibmi
7.3
CNA
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://www.ibm.com/support/pages/node/7283296