CVE Catalog

CVE-2026-18846

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.39%

32th percentile - higher than 32% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 are vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-service (DoS) for that server.

Risk Assessment

An attacker can disrupt server operations, potentially leading to unavailability of services for users.

Recommendation

Apply security patches provided by IBM for IBM i.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server (DoS) for that server.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS