CVE-2026-18527

9.9 criticalEPSS 0.5%

Critical (9.9). EPSS 0.5% chance of exploitation in the next 30 days.

IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticated profile gaining elevated privileges on the IBM i system.

Severity

CVSS 3.1

9.9 critical

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-384
Published: 2026-08-28
Modified: 2026-08-31
Record from: the NVD, synced 2026-10-19

References

https://www.ibm.com/support/pages/node/7284580

Check your stack JSON