CVE-2026-18106

MediumCVSS 4.3

Published: 12/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

29th percentile - higher than 29% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied path input.

Risk Assessment

An attacker could access confidential data, potentially leading to information disclosure and security breaches.

Recommendation

Apply fixes from IBM for IBM i to improve path validation and prevent unauthorized information access.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied path input.