CVE Catalog

CVE-2026-18068

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.22%

12th percentile - higher than 12% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and element-count confusion.

Risk Assessment

Disclosure of sensitive information may compromise data confidentiality, potentially leading to data leakage or further attacks.

Recommendation

Apply IBM patches for IBM i and monitor network traffic for suspicious requests.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and element-count confusion.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS