CVE-2026-18713
Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in IBM i Navigator for i

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: IBM Corporation

Description
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-08-13
AI Q&A
2026-08-12
EPSS Evaluated
N/A
NVD
CVE-2026-18713
EUVD
EUVD-2026-57359

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
ibm i 7.6
ibm i 7.5
ibm i 7.4
ibm i 7.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in IBM i versions 7.6, 7.5, 7.4, and 7.3 allows an authenticated user to escalate privileges to root level through Navigator for i. This means a user with limited access could gain full control over the system and execute arbitrary commands.

Impact Analysis

An attacker could exploit this to gain complete control of the IBM i system, allowing them to install malware, steal sensitive data, disrupt operations, or pivot to other systems in the network. The high CVSS score indicates significant risk.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements under GDPR, HIPAA, and other regulations. Organizations may face fines, legal action, and reputational damage if exploited.

Mitigation Strategies

Apply the latest IBM i Navigator for i updates and patches immediately. Restrict user access to privileged commands and monitor for unusual privilege escalation attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18713. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart