CVE-2026-18150

Analyzed Analyzed - Analysis Complete

Race Condition in IBM i Allows Information Disclosure

Publication date: 2026-08-12

Last updated on: 2026-08-17

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-17

Generated

2026-09-02

AI Q&A

2026-08-13

EPSS Evaluated

2026-08-31

NVD

CVE-2026-18150

EUVD

EUVD-2026-57530

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.3
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-362	The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Attack-Flow Graph

Executive Summary

This vulnerability is a race condition in IBM i versions 7.6, 7.5, 7.4, and 7.3. A remote authenticated attacker could exploit this to gain access to sensitive information.

Detection Guidance

This vulnerability is specific to IBM i systems and involves a race condition that could expose sensitive information. Detection would require checking IBM i system logs for unusual access patterns or race condition events. IBM i systems may have built-in tools like DSPLOG or QSYSOPR messages to monitor such issues. No specific commands are provided in the available context.

Impact Analysis

The impact includes unauthorized access to sensitive data due to the race condition. This could lead to data breaches or leaks of confidential information.

Compliance Impact

The vulnerability allows remote authenticated attackers to obtain sensitive information due to a race condition in IBM i systems. This could lead to unauthorized access to personal or confidential data, which may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data privacy). Organizations using affected IBM i versions may face increased risk of non-compliance if proper safeguards are not implemented.

Mitigation Strategies

Apply IBM i PTFs or updates provided by IBM to address the race condition. Monitor IBM security bulletins for patches and restrict remote authenticated access where possible.

Hi! I’m here to help you understand CVE-2026-18150. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70