CVE-2026-18343 - Vulnerability Details - OpenCVE

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ibm	I

Configuration 1 [-]

cpe:2.3:o:ibm:i:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7290194

History

Thu, 15 Oct 2026 00:00:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:o:ibm:i::::::::

Tue, 13 Oct 2026 14:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 12 Oct 2026 23:45:00 +0000

Type	Values Removed	Values Added
Description		IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.
Title		IBM i is Affected By An Improper Privilege Management Vulnerability
First Time appeared		Ibm Ibm i
Weaknesses		CWE-269
CPEs		cpe:2.3:a:ibm:i:7.3:::::::* cpe:2.3:a:ibm:i:7.4:::::::* cpe:2.3:a:ibm:i:7.5:::::::* cpe:2.3:a:ibm:i:7.6:::::::*
Vendors & Products		Ibm Ibm i
References		https://www.ibm.com/support/pages/node/7290194
Metrics		cvssV3_1 `{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-10-12T23:22:29.288Z

Updated: 2026-10-13T13:48:37.463Z

Reserved: 2026-07-29T22:05:55.812Z

Link: CVE-2026-18343

Vulnrichment

Updated: 2026-10-13T13:47:58.922Z

NVD

Status : Analyzed

Published: 2026-10-13T00:17:01.270

Modified: 2026-10-14T23:48:52.703

Link: CVE-2026-18343

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18343", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-07-29T22:05:55.812Z", "datePublished": "2026-10-12T23:22:29.288Z", "dateUpdated": "2026-10-13T13:48:37.463Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-10-12T23:22:29.288Z"}, "title": "IBM i is Affected By An Improper Privilege Management Vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}], "cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM i 7.3, 7.4, 7.5, and 7.6\u00a0could allow a local attacker to modify the BOOTP table due to improper authorization.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7290194", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"}}], "solutions": [{"lang": "en", "value": "IBM i Release5770-SS1\u00a0\nPTF Number(s)PTF Download Link(s)7.6SJ11460 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11460 7.5SJ11461 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11461 7.4SJ11462 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11462 7.3SJ11463 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11463 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-SS1\u00a0<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ11460</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11460\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11460</a></td></tr><tr><td>7.5</td><td>SJ11461</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11461\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11461</a></td></tr><tr><td>7.4</td><td>SJ11462</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11462\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11462</a></td></tr><tr><td>7.3</td><td>SJ11463</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11463\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11463</a></td></tr></tbody></table></div><p>IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-18343", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-13T13:20:29.948286Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-13T13:48:37.463Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "IBM i is Affected By An Improper Privilege Management Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}]}], "solutions": [{"lang": "en", "value": "IBM i Release5770-SS1\u00a0\nPTF Number(s)PTF Download Link(s)7.6SJ11460 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11460 7.5SJ11461 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11461 7.4SJ11462 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11462 7.3SJ11463 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11463 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "value": "<div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-SS1\u00a0<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ11460</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11460\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11460</a></td></tr><tr><td>7.5</td><td>SJ11461</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11461\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11461</a></td></tr><tr><td>7.4</td><td>SJ11462</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11462\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11462</a></td></tr><tr><td>7.3</td><td>SJ11463</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11463\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11463</a></td></tr></tbody></table></div><p>IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7290194", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM i 7.3, 7.4, 7.5, and 7.6\u00a0could allow a local attacker to modify the BOOTP table due to improper authorization.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-10-12T23:22:29.288Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-18343", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-13T13:20:29.948286Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-10-13T13:47:58.922Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-18343", "state": "PUBLISHED", "dateUpdated": "2026-10-12T23:22:29.288Z", "dateReserved": "2026-07-29T22:05:55.812Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-10-12T23:22:29.288Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}