CVE-2026-18099

HighCVSS 8.9

Published: 12/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input.

Risk Assessment

An attacker could execute malicious code in the application context, potentially leading to data integrity compromise or system takeover.

Recommendation

Apply patches provided by IBM for affected versions and restrict system access to trusted users only.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input.