Local Code Execution and Denial of Service Vulnerability in IBM i Systems
CVE-2026-18086

4.5MEDIUM

Key Information:

Vendor

IBM
Status
I
Vendor
CVE Published:
13 August 2026

What is CVE-2026-18086?

A local attacker can exploit a vulnerability in IBM i versions 7.6, 7.5, 7.4, and 7.3 to execute arbitrary code or cause a denial of service. This occurs due to improper bounds checking, which potentially exposes systems to various security risks. Immediate action is recommended to mitigate these threats and protect sensitive data.

Affected Version(s)

i 7.6

i 7.5

i 7.4

References

https://www.ibm.com/support/pages/node/7283285
vendor-advisorypatch

CVSS V3.1

Score:
4.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.