CVE-2026-18669
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engine component. An authenticated attacker can execute a maliciously planted script with root authority.
Risk Assessment
Risk of full system compromise, as an attacker can execute commands with root privileges, potentially leading to system takeover.
Recommendation
Apply IBM i patches and restrict access to the activation engine component to trusted users only.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engine component. An authenticated attacker can execute a maliciously planted script with root authority.