CVE-2026-18509: IBM i is Affected By A Prvilege Escalation Vulnerability []

Published Aug 12, 2026

Updated

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation via the Navigator for i debugger. This could allow the attacker to access or manipulate sensitive data on the system, or create new profiles with elevated privileges on the IBM i system.

Other sources

IBM i could allow a local authenticated attacker to gain privilege escalation via the Navigator for i debugger. This could allow the attacker to access or manipulate sensitive data on the system, or create new profiles with elevated privileges on the IBM i system.

— IBM

Affected Software

5 affected components

IBM IBM i>=7.3<=7.6

IBM i<=7.6

IBM i<=7.5

IBM i<=7.4

IBM i<=7.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM i 7.3 to a version that resolves this vulnerability.
Fixed in 7.3Patch SJ11128
Upgrade
Upgrade IBM i 7.6 to a version that resolves this vulnerability.
Fixed in 7.6Patch SJ10887

Event History

Aug 12, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Aug 13, 2026

CVE Published

via MITRE·08:43 PM

Data Sourced

via MITRE·08:43 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7283279

Frequently Asked Questions

What is the severity of CVE-2026-18509?

CVE-2026-18509 has a severity score of 8.2, indicating a high risk associated with this vulnerability.

How can I mitigate CVE-2026-18509?

To mitigate CVE-2026-18509, ensure all users have the minimum necessary privileges and apply any available patches from IBM.

Who is affected by CVE-2026-18509?

CVE-2026-18509 affects users of IBM i versions 7.3 through 7.6.

Can CVE-2026-18509 lead to data breaches?

Yes, CVE-2026-18509 can allow attackers to access and manipulate sensitive data, increasing the risk of data breaches.

What kind of attack does CVE-2026-18509 facilitate?

CVE-2026-18509 facilitates privilege escalation attacks, enabling authenticated attackers to gain higher access within the system.

CVE-2026-18509: IBM i is Affected By A Prvilege Escalation Vulnerability []

Other sources

Affected Software

Remediation

Event History

Parent advisories

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-18509?

How can I mitigate CVE-2026-18509?

Who is affected by CVE-2026-18509?

Can CVE-2026-18509 lead to data breaches?

What kind of attack does CVE-2026-18509 facilitate?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-18509?

How can I mitigate CVE-2026-18509?

Who is affected by CVE-2026-18509?

Can CVE-2026-18509 lead to data breaches?

What kind of attack does CVE-2026-18509 facilitate?