{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18068", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-07-28T14:50:07.920Z", "datePublished": "2026-08-13T20:41:41.526Z", "dateUpdated": "2026-08-14T16:29:37.939Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-08-13T20:41:41.526Z"}, "title": "IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}], "cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and element-count confusion.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and element-count confusion.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7283285", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\nIBM i Release5770-JV1\nPTF Number(s)PTF Download Link(s)7.6SJ11036\nSJ11072\nSJ11082\nSJ11088 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11036 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11072 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11082 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11088 7.5SJ11068\nSJ11073\nSJ11070\nSJ11077\nSJ11087\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11068 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11073 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11070 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11077 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11087 7.4SJ11071\nSJ11069\nSJ11076\nSJ11086\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11071 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11069 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11076 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11086 7.3SJ11067\nSJ11075\nSJ11085\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11067 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11075 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11085 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p><strong>IBM strongly recommends addressing the vulnerability now.</strong></p><div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-JV1<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ11036<br/>SJ11072<br/>SJ11082<br/>SJ11088</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11036\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11036</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11072\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11072</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11082\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11082</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11088\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11088</a></td></tr><tr><td>7.5</td><td>SJ11068<br/>SJ11073<br/>SJ11070<br/>SJ11077<br/>SJ11087<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11068\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11068</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11073\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11073</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11070\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11070</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11077\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11077</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11087\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11087</a></td></tr><tr><td>7.4</td><td>SJ11071<br/>SJ11069<br/>SJ11076<br/>SJ11086<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11071\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11071</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11069\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11069</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11076\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11076</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11086\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11086</a></td></tr><tr><td>7.3</td><td>SJ11067<br/>SJ11075<br/>SJ11085<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11067\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11067</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11075\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11075</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11085\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11085</a></td></tr></tbody></table></div><p>IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-14T16:29:13.383651Z", "id": "CVE-2026-18068", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-14T16:29:37.939Z"}}]}}

{}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"], "product": "i", "vendor": "IBM", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ibm:i:7.3:*:*:*:*:*:*:*", "matchCriteriaId": "9A49E8C5-7967-42AE-A787-C533D24A63D7", "vulnerable": true}, {"criteria": "cpe:2.3:o:ibm:i:7.4:*:*:*:*:*:*:*", "matchCriteriaId": "92D03306-B6C9-403E-99A2-CE9D8DC3B482", "vulnerable": true}, {"criteria": "cpe:2.3:o:ibm:i:7.5:*:*:*:*:*:*:*", "matchCriteriaId": "F7CCB5BF-08EF-472F-A663-5DE270234F10", "vulnerable": true}, {"criteria": "cpe:2.3:o:ibm:i:7.6:*:*:*:*:*:*:*", "matchCriteriaId": "AFFF96C2-7E0F-4DF9-AF51-3EE357D51095", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and element-count confusion."}], "id": "CVE-2026-18068", "lastModified": "2026-08-19T16:35:50.420", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-18068", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-14T16:29:13.383651Z", "version": "2.0.3"}}]}, "published": "2026-08-13T21:17:44.067", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7283285"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}