CVE-2026-18846
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
IBM i versions 7.6, 7.5, 7.4, and 7.3 are vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-service (DoS) for that server.
Risk Assessment
An attacker can disrupt server operations, potentially leading to unavailability of services for users.
Recommendation
Apply security patches provided by IBM for IBM i.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server (DoS) for that server.

