CVE-2026-18669

High

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the…

ibm·CWE-250·Published 2026-08-12

CVSS

8.8

EPSS

0.01

KEV

Exploits

Vendor statements (1)

ibm.com

cve.orgen

247 chars

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engine component. An authenticated attacker can execute a maliciously planted script with root authority.

NVDes

274 chars

IBM i 7.6, 7.5, 7.4 y 7.3 es vulnerable a una escalada de privilegios como resultado de una vulnerabilidad de ejecución remota de código en el componente del motor de activación. Un atacante autenticado puede ejecutar un script plantado maliciosamente con autoridad de root.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	8.8	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	ENISA EUVD	8.8	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H