CVE Catalog
CVE-2026-18249
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk0.27%
19th percentile - higher than 19% of all known CVEs
Summary
IBM i versions 7.6, 7.5, 7.4, and 7.3 may allow a remote authenticated attacker to gain elevated privileges due to improper validation of pointers read from Java-controlled addresses.
Risk Assessment
The risk includes the possibility of remote privilege escalation, which could lead to unauthorized access to the system and data.
Recommendation
It is recommended to apply IBM fixes and monitor remote user activity for suspicious behavior.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of pointers read from Java-controlled addresses.