CVE-2026-18858

Summary

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH.

Affected Software

VendorProductVersion RangeStatus
IBMi7.6affected
IBMi7.5affected

Weaknesses

  • CWE-267: CWE-267 Privilege Defined With Unsafe Actions

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References