CVE-2026-18249

IBM i 7.3–7.6 is affected by CVE-2026-18249: remote authenticated attackers could gain elevated privileges due to improper validation of pointers read from Java‑controlled addresses. The issue affects IBM Java SDK/Runtime on IBM i, with a base CVSS v3.1 score of 8.4 (HIGH) and network attack vect...