CVE-2026-18509
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
IBM i versions 7.6, 7.5, 7.4, and 7.3 may allow a local authenticated attacker to gain privilege escalation via the Navigator for i debugger. This could allow the attacker to access or manipulate sensitive data on the system, or create new profiles with elevated privileges on the IBM i system.
Risk Assessment
The risk includes privilege escalation, which could lead to unauthorized access to sensitive data, system manipulation, and creation of accounts with elevated privileges.
Recommendation
It is recommended to restrict access to the Navigator for i debugger to trusted administrators only and apply relevant IBM fixes.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation via the Navigator for i debugger. This could allow the attacker to access or manipulate sensitive data on the system, or create new profiles with elevated privileges on the IBM i system.