CVE-2026-18715

MediumCVSS 6.5

Published: 13/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 14/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper processing of XML external entities.

Risk Assessment

Disclosure of sensitive information may compromise the confidentiality of data stored on IBM i, potentially leading to data leakage or further attacks.

Recommendation

Apply patches provided by IBM for the affected versions of IBM i and restrict access to XML processing services.

Original NVD description (English source)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper processing of XML external entities.