{"affected":[{"product":"i","source":"CNA: ibm","vendor":"IBM","versions":[{"status":"affected","version":"7.6"},{"status":"affected","version":"7.5"},{"status":"affected","version":"7.4"},{"status":"affected","version":"7.3"}]}],"cveId":"CVE-2026-77153","cwes":["CWE-862"],"description":"IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to obtain sensitive information from the Host-Based Printer Subsystem due to no authorization check. A bad actor could use this vulnerability to print files they should not be able to access.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":4.8,"severity":"medium","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","version":"3.1"}],"modifiedAt":1794163137177,"publishedAt":1794163137177,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7294253"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"When using Access Client Solutions (ACS) to create Telnet printer sessions, version 1.1.9.15 or later must be installed for interoperability after applying the Host-Based Printer Subsystem PTFs.  Failure to update to a compatible ACS application version will result in being unable to connect via telnet for printing. The current version of the ACS application can be viewed by clicking the 'About' link under the 'Help' tab in ACS.\n\n\n\nView each PTF's cover letter for the additional actions required prior to installation.\n\nIBM i Release5770-SS1 \nPTF Number(s)PTF Download Link(s)7.6SJ11502 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11502 7.5SJ11523 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11523 7.4SJ11524 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11524 7.3SJ11522 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11522 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products."},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7294253"}],"revision":"deedb0d8af737476ecbfef048fb854c8c8d9acd7c8d0b263fde7b2280c2167e6","sources":[{"modifiedAt":1794163137177,"name":"CNA: ibm","retrievedAt":1794164936228,"url":"https://www.cve.org/CVERecord?id=CVE-2026-77153"}],"ssvc":null,"status":"published","title":"IBM i is Affected By Missing Authorization Vulnerability in Host-Based Printer Subsystem []","updatedAt":1794164936228}