CVE-2026-18148

CVE-2026-18148 affects IBM i 7.3–7.6 and relates to Navigator for i. A remote authenticated attacker could inject arbitrary content into Navigator log files due to improper output neutralization for logs (CWE-117). Impact is reflected as confidentiality/availability untouched, integrity low (per ...

CVE-2026-18713

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

CVE-2026-17266 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-17266

IBM i (7.6, 7.5, 7.4, 7.3) is affected by CVE-2026-17266 in Navigator for i, a path traversal flaw that could allow a remote authenticated attacker to obtain sensitive information by improper limitation of a pathname to a restricted directory. CVSS base 6.5 (Network, Low attacker effort, Privileg...

CVE-2026-18235 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...

CVE-2026-18235

IBM i is affected by CVE-2026-18235 in Navigator for i. Description: remote authenticated attacker could execute arbitrary Control Language commands due to insufficient input validation. Affected products/versions: IBM i 7.3, 7.4, 7.5, 7.6. CVSS v3.1 base score 8.3 (HIGH) with network attack vect...

CVE-2026-17268 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of a session token...

CVE-2026-17276 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privileges due to improper authorization in the handling of high-authority threads...

CVE-2026-17276

IBM i (7.3–7.6) is affected by CVE-2026-17276 in Navigator for i, enabling a remote authenticated attacker to escalate privileges due to improper authorization in handling of high‑authority threads. The issue is rated CVSS v3.1 base 9.6 (Critical) with network attack vector, low attack complexity...

CVE-2026-18250 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to a race condition...

CVE-2026-18250

CVE-2026-18250 affects IBM i Navigator for i on IBM i 7.3–7.6. The issue is a race condition that allows a remote authenticated attacker to obtain sensitive information and bypass security restrictions (CWE-362). The IBM bulletin groups this with other Navigator for i vulnerabilities and lists a ...

EUVD-2026-57359

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

CVE-2026-18713 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

CVE-2026-18713

IBM i (7.3–7.6) is affected by CVE-2026-18713: Navigator for i contains a privilege-escalation flaw that could allow an authenticated user to elevate to root and run commands. IBM lists this under multipleNavigator-for-i vulnerabilities; the issue is addressed with PTFs SJ10887/SJ10888/SJ10890/SJ...

CVE-2026-18713

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

CVE-2026-18683

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

CVE-2026-18847

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoofing of Navigator for i...

EUVD-2026-57355

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoofing of Navigator for i...

CVE-2026-18847

IBM i 7.3–7.6's Navigator for i web interface suffers from an origin validation error (CWE-346), allowing remote unauthenticated attackers to spoof the service and harvest credentials. IBM provides PTFs SJ10887 (7.6), SJ10888 (7.5), SJ10890 (7.4), and SJ10891 (7.3) as fixes. No in-the-wild exploi...

CVE-2026-18847 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoofing of Navigator for i...