CVE Daily

CVE-2025-2947

IBM i 7.6  contains a privilege escalation vulnerability due to incorrect profi...

High CVSS 7.2

Overview

IBM i 7.6 

contains a privilege escalation vulnerability due to incorrect profile swapping in an OS command.  A malicious actor can use the command to elevate privileges to gain root access to the host operating system.

CWE: CWE-278 Published: 2025-04-17T17:15:33.490
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.2 (HIGH)
  • Detected tags: priv_esc (tag impact: HIGH)

Recommended actions:

  • Fix privilege escalation urgently.
  • Enforce least-privilege and strengthen EDR detection.

Recommended tools

Tags