CVE-2026-77153IBM i is Affected By Missing Authorization Vulnerability in Host-Based Printer Subsystem []
- 4.8MediumCVSS base score
- 0.23%Exploitation in 30 daysEPSS · top 86% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to obtain sensitive information from the Host-Based Printer Subsystem due to no authorization check. A bad actor could use this vulnerability to print files they should not be able to access.
Timeline
ID reserved
By ibm
- 3 months later
· 3 months later
Published
- 4 days later
· 4 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| ibmCNA (assigner) | 3.1 | Medium4.8 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L |
| NVDNVD · Undergoing Analysis | 3.1 | Medium4.8 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L |
- EPSS (exploitation in 30 days)
- 0.23% · top 86% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.8.
Affected products
What to do
Solution: When using Access Client Solutions (ACS) to create Telnet printer sessions, version 1.1.9.15 or later must be installed for interoperability after applying the Host-Based Printer Subsystem PTFs. Failure to update to a compatible ACS application version will result in being unable to connect via telnet for printing. The current version of the ACS application can be viewed by clicking the 'About' link under the 'Help' tab in ACS. View each PTF's cover letter for the additional actions required prior to installation. IBM i Release5770-SS1 PTF Number(s)PTF Download Link(s)7.6SJ11502 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11502 7.5SJ11523 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11523 7.4SJ11524 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11524 7.3SJ11522 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11522 IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.
References
References1
- https://www.ibm.com/support/pages/node/7294253 (opens in a new tab)vendor-advisorypatch
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-119723 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-77153)Record last updated .