CVE Catalog
CVE-2026-18148
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.20%
10th percentile - higher than 10% of all known CVEs
Summary
IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to inject arbitrary content into Navigator log files due to improper output neutralization for logs.
Risk Assessment
An attacker could manipulate logs, potentially hiding actions or misleading security analysis.
Recommendation
Apply the patches provided by IBM for the affected versions of IBM i.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to inject arbitrary content into Navigator log files due to improper output neutralization for logs.