CVE-2026-18669

Analyzed Analyzed - Analysis Complete

Privilege Escalation via Remote Code Execution in IBM i

Publication date: 2026-08-12

Last updated on: 2026-08-13

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engine component. An authenticated attacker can execute a maliciously planted script with root authority.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-13

Generated

2026-09-02

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-31

NVD

CVE-2026-18669

EUVD

EUVD-2026-57383

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	From 7.3 (inc) to 7.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-250	The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

Attack-Flow Graph

Executive Summary

IBM i 7.6, 7.5, 7.4, and 7.3 are vulnerable to privilege escalation due to a remote code execution flaw in the activation engine component. An authenticated attacker can execute a maliciously planted script with root authority.

Detection Guidance

Detection requires checking for unpatched IBM i systems running versions 7.3 to 7.6. Verify if PTFs SJ11009 (7.6), SJ10978 (7.5), SJ10977 (7.4), or SJ10976 (7.3) are applied. Use IBM i commands like DSPPTF to list installed PTFs and compare against required fixes.

Impact Analysis

An attacker could gain full control over the system, leading to unauthorized access, data theft, system disruption, or installation of malicious software. The high CVSS score of 8.8 indicates significant risk.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Compliance may be compromised if sensitive data is exposed.

Mitigation Strategies

Apply the provided PTFs immediately: SJ11009 for IBM i 7.6, SJ10978 for 7.5, SJ10977 for 7.4, and SJ10976 for 7.3. If using unsupported versions, upgrade to a supported release.

Hi! I’m here to help you understand CVE-2026-18669. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70