CVE Catalog
CVE-2026-18098
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk0.19%
9th percentile - higher than 9% of all known CVEs
Summary
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw.
Risk Assessment
The risk for the organization is the possibility of sensitive data leakage and system integrity compromise by an authenticated attacker.
Recommendation
It is recommended to apply patches from IBM and validate/sanitize XML input in applications.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw.