CVE-2026-18068

Analyzed Analyzed - Analysis Complete

IBM i Byte-Count Confusion Information Disclosure

Publication date: 2026-08-13

Last updated on: 2026-08-19

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and element-count confusion.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-19

Generated

2026-09-03

AI Q&A

2026-08-14

EPSS Evaluated

2026-09-01

NVD

CVE-2026-18068

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.3
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM i 7.6, 7.5, 7.4, and 7.3 allows a remote attacker to obtain sensitive information due to confusion between byte-count and element-count in data handling.

Detection Guidance

This vulnerability involves a byte-count and element-count confusion in IBM i systems. Detection requires checking for unusual data transmission patterns or mismatches between expected and actual data sizes in network traffic or system logs. Review IBM i system logs for errors related to data parsing or transmission failures. Use network monitoring tools to inspect traffic for anomalies in data packet sizes or unexpected data transfers.

Impact Analysis

A remote attacker could exploit this to access sensitive information, potentially leading to data breaches or unauthorized access to confidential data.

Compliance Impact

The vulnerability allows remote attackers to obtain sensitive information due to a byte-count and element-count confusion in IBM i systems. This could lead to unauthorized data exposure, potentially violating confidentiality requirements in GDPR and HIPAA. However, the specific impact on compliance depends on the data processed and stored on the affected systems.

Mitigation Strategies

Apply IBM i PTFs or updates provided by IBM to address the byte-count and element-count confusion issue. Monitor IBM security advisories for patches and verify system configurations to prevent unauthorized access.

Hi! I’m here to help you understand CVE-2026-18068. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70