Quick answers
- Is CVE-2026-17207 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-17207 being exploited in the wild.
- How severe is CVE-2026-17207?
- Medium severity, with a CVSS score of 6.5, published 4 September 2026.
- Which products and versions are affected?
- IBM I 7.3 7.3; IBM I 7.4 7.4; IBM I 7.5 7.5; IBM I 7.6 7.6.
- Is there a fix for CVE-2026-17207?
- A patch was published on 2026-09-04: PTF SJ11320 (7.6), SJ11319 (7.5), SJ11318 (7.4), SJ11317 (7.3) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-17207 attacked?
- It is attacked over the network, in an operating system.
- Am I affected by CVE-2026-17207?
- Check whether you run IBM I 7.3, IBM I 7.4, IBM I 7.5 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A buffer overflow vulnerability (CWE-787: Out-of-bounds Write) exists in the Network File System (NFS) implementation within IBM i versions 7.3 through 7.6. The vulnerability is remotely exploitable over the network without authentication, precondition, or user interaction (CVSS vector: AV:N/AC:L/PR:N/UI:N/S:U). An attacker can send a specially crafted NFS request to trigger the out-of-bounds write, leading to denial of service and data integrity compromise. IBM has released platform-specific patches (PTFs SJ11317 through SJ11320) for all affected versions.
Affected products
- IBM i 7.6 7.6
- IBM i 7.5 7.5
- IBM i 7.4 7.4
- IBM i 7.3 7.3
Timeline
- 2026-09-04: disclosed
- 2026-09-04: patched: PTF SJ11320 (7.6), SJ11319 (7.5), SJ11318 (7.4), SJ11317 (7.3)