CVE-2026-18221
Critical
9.8 CVSS v3.1
- Published
- Sep 4, 2026
- Updated
- Sep 8, 2026
- Vendor
- Ibm
- Affected versions
- See affected products
- Weakness
- CWE-287
Summary
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper validation of client-supplied authentication parameters.
Severity
Critical (9.8)CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
- Ibm I 7.3
- Ibm I 7.4
- Ibm I 7.5
- Ibm I 7.6
Exploitation status
Unknown
Technical details
Technical analysis has not been written for this record yet.
Mitigation & remediation
Follow the vendor advisory linked below for patches and workarounds.