CVE-2026-102618
Awaiting Analysis Awaiting Analysis - Queue

Authenticated User-Induced System Auditing Disablement in IBM i

Publication date: 2026-11-08

Last updated on: 2026-11-08

Assigner: IBM Corporation

Description
IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated user to indirectly disable system auditing, which they otherwise don't have authority to disable.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-08
Last Modified
2026-11-08
Generated
2026-11-08
AI Q&A
2026-11-08
EPSS Evaluated
N/A
NVD
CVE-2026-102618
EUVD
EUVD-2026-119619

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
IBM i 7.6
IBM i 7.5
IBM i 7.4
IBM i 7.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-693 The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IBM i 7.6, 7.5, 7.4, and 7.3 have a vulnerability where an authenticated user can indirectly disable system auditing without proper authority. This is classified as a protection mechanism failure (CWE-693).

Detection Guidance

Detection requires checking if system auditing is disabled or if unauthorized changes were made to audit configurations. Review IBM i audit logs for anomalies and verify PTF levels against IBM's provided fixes. Use WRKSYSVAL QAUDCTL and DSPLOG commands to inspect audit settings and logs.

Impact Analysis

This vulnerability allows an attacker with authenticated access to disable system auditing, potentially hiding malicious activities. It could lead to undetected security breaches or compliance violations due to lack of audit logs.

Compliance Impact

Disabling auditing could violate compliance requirements that mandate audit logging for security events. This may lead to non-compliance with GDPR, HIPAA, or other regulations requiring audit trails.

Mitigation Strategies

Apply the PTF fixes provided by IBM for your IBM i version (7.3, 7.4, 7.5, or 7.6) as soon as possible. If using an unsupported version, upgrade to a supported release immediately.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-102618. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...