HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-18098 — IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obta...

·Source: NIST NVD

Updated:

Executive Summary

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw.

Analysis

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw. CVSS Score: 8.1. Published: 2026-08-12T17:17:24.993.

Indicators of Compromise (1)

CVE (1)
CVE-2026-18098
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 12, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-19977 — A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element ...

A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_url of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-19977
NIST NVD
MEDIUMVulnerability

Western Union gets New York nod for Intermax acquisition; still face California hurdles

Western Union has committed to maintain its store locations in New York State and cap fee increases for three years in order to head off opposition to its acquisition of rival Intermax.

Finextra
MEDIUMVulnerability

Polygon joins BofE's Digital Pound Lab to test cross-border settlement

Polygon Labs has joined Nobo Finance and Dun & Bradstreet for phase two of the Bank of England's Digital Pound Lab, testing near-instant cross-border settlement.

Finextra