CVE-2026-18341: IBM i is Affected By Buffer Overflow Vulnerability []

Q: Who can exploit this issue?

A remote attacker must be authenticated and have at least low privileges. No user interaction is required.

Q: What impact could successful exploitation have?

Successful exploitation could corrupt memory. The supplied severity vector indicates potential low impact to confidentiality, integrity, and availability.

Published Sep 2, 2026

Updated

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow.

Other sources

IBM i could allow a remote authenticated attacker to corrupt memory due to an integer underflow.

— IBM

Affected Software

5 affected components

IBM IBM i=7.6, =7.5, =7.4, =7.3

IBM i<=7.6

IBM i<=7.5

IBM i<=7.4

IBM i<=7.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM i 7.6 (5770-999) to a version that resolves this vulnerability.
Fixed in 7.6Patch MJ11326
Upgrade
Upgrade IBM i 7.5 (5770-999) to a version that resolves this vulnerability.
Fixed in 7.5Patch MJ11327
Upgrade
Upgrade IBM i 7.4 (5770-999) to a version that resolves this vulnerability.
Fixed in 7.4Patch MJ11328
Upgrade
Upgrade IBM i 7.3 (5770-999) to a version that resolves this vulnerability.
Fixed in 7.3Patch MJ11329

Event History

Sep 2, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Sep 4, 2026

CVE Published

via MITRE·04:25 PM

Data Sourced

via MITRE·04:25 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7286094

Frequently Asked Questions

Who can exploit this issue?