CVE-2026-18235

HighCVSS 8.3

Published: 12/08/2026(UTC)Updated: 13/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

23th percentile - higher than 23% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation.

Risk Assessment

An attacker could gain control over the system by executing unauthorized commands, potentially leading to data integrity and confidentiality breaches.

Recommendation

Apply security patches provided by IBM and restrict system access to trusted users only.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation.