HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-18683 — IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator...

·Source: NIST NVD

Updated:

Executive Summary

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands.

Analysis

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands. CVSS Score: 8.8. Published: 2026-08-12T17:17:25.790.

Indicators of Compromise (1)

CVE (1)
CVE-2026-18683
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 12, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Revolut to open network of airport lounges across Europe

Revolut has unveiled plans for a network of premium branded airport lounges across major European destinations.

Finextra
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-74889 — openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info para...

openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks.

CVE-2026-74889
NIST NVD
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-74886 — openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerabil...

openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUS_MODULES set. Attackers can bypass AST analysis through string obfuscation or encoding to import unblocked dangerous modules like sys, shutil, multiprocessing, importlib, and pickle for arbitrary code execution.

CVE-2026-74886
NIST NVD