CVE Catalog
CVE-2026-18847
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.18%
7th percentile - higher than 7% of all known CVEs
Summary
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoofing of Navigator for i.
Risk Assessment
The risk for the organization is the possibility of credential theft, which can lead to unauthorized access to the IBM i system and sensitive data.
Recommendation
It is recommended to apply patches provided by IBM for the respective IBM i versions and monitor network activity for suspicious spoofing attempts.
Original NVD description (English source)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoofing of Navigator for i.