CVE-2026-18846 - Vulnerability Details - OpenCVE

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server (DoS) for that server.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Ibm	I

Configuration 1 [-]

cpe:2.3:a:ibm:i:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7283578

History

Mon, 17 Aug 2026 15:45:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:ibm:i::::::::

Thu, 13 Aug 2026 20:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 13 Aug 2026 19:30:00 +0000

Type	Values Removed	Values Added
Description		IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server (DoS) for that server.
Title		IBM i is Affected By Multiple Vulnerabilities in Host Servers
First Time appeared		Ibm Ibm i
Weaknesses		CWE-787
CPEs		cpe:2.3:a:ibm:i:7.3.0:::::::* cpe:2.3:a:ibm:i:7.3:::::::* cpe:2.3:a:ibm:i:7.4.0:::::::* cpe:2.3:a:ibm:i:7.4:::::::* cpe:2.3:a:ibm:i:7.5.0:::::::* cpe:2.3:a:ibm:i:7.5:::::::* cpe:2.3:a:ibm:i:7.6.0:::::::* cpe:2.3:a:ibm:i:7.6:::::::*
Vendors & Products		Ibm Ibm i
References		https://www.ibm.com/support/pages/node/7283578
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-08-13T18:58:23.163Z

Updated: 2026-08-13T19:32:50.526Z

Reserved: 2026-08-04T15:07:01.355Z

Link: CVE-2026-18846

Vulnrichment

Updated: 2026-08-13T19:32:45.679Z

NVD

Status : Analyzed

Published: 2026-08-13T20:17:19.713

Modified: 2026-08-17T15:28:53.697

Link: CVE-2026-18846

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18846", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-08-04T15:07:01.355Z", "datePublished": "2026-08-13T18:58:23.163Z", "dateUpdated": "2026-08-13T19:32:50.526Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-08-13T18:58:23.163Z"}, "title": "IBM i is Affected By Multiple Vulnerabilities in Host Servers", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}], "cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server (DoS) for that server.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server (DoS) for that server.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7283578", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\n\n\nHost Servers\n\nIBM i Release5770-SS1\nPTF Number(s)PTF Download Link(s)7.6SJ11101\nSJ11097 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11101 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11097 7.5SJ11102\nSJ11098\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11102 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11098 7.4SJ11103\nSJ11099\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11103 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11099 7.3SJ11104\nSJ11100\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11100 \n\n\n\n\n\n\n\nDebug Server\n\nIBM i Release5770-SS1\nPTF Number(s)PTF Download Link(s)7.6SJ10899 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10899 \n\n\n\n\n\n\n\nTelnet\n\nIBM i Release5770-SS1\nPTF Number(s)PTF Download Link(s)7.6SJ11022 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11022 \n\n\n\n\n\n\n\nDRDA/DDM\n\nIBM i Release5770-SS1\nPTF Number(s)PTF Download Link(s)7.6SJ10848 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10848 \n\n\n\n\n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p><strong>IBM strongly recommends addressing the vulnerability now.</strong></p><p><strong>Host Servers</strong></p><div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-SS1<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ11101<br/>SJ11097</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11101\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11101</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11097\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11097</a></td></tr><tr><td>7.5</td><td>SJ11102<br/>SJ11098<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11102\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11102</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11098\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11098</a></td></tr><tr><td>7.4</td><td>SJ11103<br/>SJ11099<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11103\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11103</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11099\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11099</a></td></tr><tr><td>7.3</td><td>SJ11104<br/>SJ11100<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11104\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11104\u00a0</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11100\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11100</a></td></tr></tbody></table></div><p></p><p><strong>Debug Server</strong></p><div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong><strong>5770-SS1</strong><br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ10899</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10899\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10899</a></td></tr></tbody></table></div><p></p><p><strong>Telnet</strong></p><div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-SS1<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ11022</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11022\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11022</a></td></tr></tbody></table></div><p></p><p><strong>DRDA/DDM</strong></p><div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-SS1<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ10848</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10848\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10848</a></td></tr></tbody></table></div><p></p><p>IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-13T19:32:41.002862Z", "id": "CVE-2026-18846", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T19:32:50.526Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-18846", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-13T19:32:41.002862Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T19:32:45.679Z"}}], "cna": {"title": "IBM i is Affected By Multiple Vulnerabilities in Host Servers", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "i", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}]}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\n\n\nHost Servers\n\nIBM i Release5770-SS1\nPTF Number(s)PTF Download Link(s)7.6SJ11101\nSJ11097 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11101 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11097 7.5SJ11102\nSJ11098\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11102 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11098 7.4SJ11103\nSJ11099\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11103 \n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11099 7.3SJ11104\nSJ11100\n https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11100 \n\n\n\n\n\n\n\nDebug Server\n\nIBM i Release5770-SS1\nPTF Number(s)PTF Download Link(s)7.6SJ10899 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10899 \n\n\n\n\n\n\n\nTelnet\n\nIBM i Release5770-SS1\nPTF Number(s)PTF Download Link(s)7.6SJ11022 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11022 \n\n\n\n\n\n\n\nDRDA/DDM\n\nIBM i Release5770-SS1\nPTF Number(s)PTF Download Link(s)7.6SJ10848 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10848 \n\n\n\n\n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.", "supportingMedia": [{"type": "text/html", "value": "<p><strong>IBM strongly recommends addressing the vulnerability now.</strong></p><p><strong>Host Servers</strong></p><div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-SS1<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ11101<br/>SJ11097</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11101\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11101</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11097\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11097</a></td></tr><tr><td>7.5</td><td>SJ11102<br/>SJ11098<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11102\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11102</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11098\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11098</a></td></tr><tr><td>7.4</td><td>SJ11103<br/>SJ11099<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11103\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11103</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11099\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11099</a></td></tr><tr><td>7.3</td><td>SJ11104<br/>SJ11100<br/></td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11104\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11104\u00a0</a><br/><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11100\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11100</a></td></tr></tbody></table></div><p></p><p><strong>Debug Server</strong></p><div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong><strong>5770-SS1</strong><br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ10899</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10899\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10899</a></td></tr></tbody></table></div><p></p><p><strong>Telnet</strong></p><div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-SS1<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ11022</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11022\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11022</a></td></tr></tbody></table></div><p></p><p><strong>DRDA/DDM</strong></p><div><table><colgroup><col/><col/><col/></colgroup><thead><tr><td><strong>IBM i Release</strong></td><td><strong>5770-SS1<br/>PTF Number(s)</strong></td><td><strong>PTF Download Link(s)</strong></td></tr></thead><tbody><tr><td>7.6</td><td>SJ10848</td><td><a href=\"https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10848\" rel=\"nofollow\">https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10848</a></td></tr></tbody></table></div><p></p><p>IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.</p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7283578", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server (DoS) for that server.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server (DoS) for that server.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-08-13T18:58:23.163Z"}}}, "cveMetadata": {"cveId": "CVE-2026-18846", "state": "PUBLISHED", "dateUpdated": "2026-08-13T19:32:50.526Z", "dateReserved": "2026-08-04T15:07:01.355Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-08-13T18:58:23.163Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*"], "product": "i", "vendor": "IBM", "versions": [{"status": "affected", "version": "7.6"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.4"}, {"status": "affected", "version": "7.3"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:i:*:*:*:*:*:*:*:*", "matchCriteriaId": "46DEA5F3-B160-471F-8C4C-0E8338EDEDA5", "versionEndIncluding": "7.6", "versionStartIncluding": "7.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server (DoS) for that server."}], "id": "CVE-2026-18846", "lastModified": "2026-08-17T15:28:53.697", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "psirt@us.ibm.com", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-18846", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-13T19:32:41.002862Z", "version": "2.0.3"}}]}, "published": "2026-08-13T20:17:19.713", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7283578"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "psirt@us.ibm.com", "type": "Primary"}]}