CVE-2026-18713

Analyzed Analyzed - Analysis Complete

Privilege Escalation in IBM i Navigator for i

Publication date: 2026-08-12

Last updated on: 2026-08-13

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-13

Generated

2026-09-02

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-31

NVD

CVE-2026-18713

EUVD

EUVD-2026-57359

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	From 7.2 (inc) to 7.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability in IBM i versions 7.6, 7.5, 7.4, and 7.3 allows an authenticated user to escalate privileges to root level through Navigator for i. This means a user with limited access could gain full control over the system and execute arbitrary commands.

Detection Guidance

This vulnerability requires checking IBM i Navigator for i configurations and user privileges. Review user access levels and audit logs for unauthorized privilege escalations. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to gain complete control of the IBM i system, allowing them to install malware, steal sensitive data, disrupt operations, or pivot to other systems in the network. The high CVSS score indicates significant risk.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements under GDPR, HIPAA, and other regulations. Organizations may face fines, legal action, and reputational damage if exploited.

Mitigation Strategies

Apply the latest IBM i Navigator for i updates and patches immediately. Restrict user access to privileged commands and monitor for unusual privilege escalation attempts.

Hi! I’m here to help you understand CVE-2026-18713. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70