IBM i Privilege Escalation Vulnerability CVE-2026-18669 Advisory and Fix

Vulnerability Overview Vulnerability Name: IBM i Vulnerable to Privilege Escalation [CVE-2026-18669] Description: IBM i contains a privilege escalation vulnerability. Attackers can execute malicious scripts within the activation engine component through a remote code execution vulnerability to gain root privileges. CVE ID: CVE-2026-18669 CWE ID: CWE-250: Execution with Unnecessary Privileges CVSS Source: IBM CVSS Base Score: 8.8 CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Affected Products Affected Product: IBM i Affected Versions: - 7.6 - 7.5 - 7.4 - 7.3 Remediation Recommendation: IBM strongly recommends that users resolve this vulnerability as soon as possible. Fixed Versions: - IBM i 7.6: PTF 5311009 - IBM i 7.5: PTF 5310978 - IBM i 7.4: PTF 5310977 - IBM i 7.3: PTF 5310976 Additional Information Published Date: August 11, 2026 Modified Date: August 11, 2026 Document ID: 7283278 References Complete CVSS v3 Guide On-line Calculator v3 Related Resources IBM Secure Engineering Web Portal IBM Product Security Incident Response Blog Disclaimer The Common Vulnerability Scoring System (CVSS) is an industry standard designed to communicate vulnerability severity and response priority. According to the Forum of Incident Response and Security Teams (FIRST), IBM provides CVSS scores "as is" without any express or implied warranties. Customers are responsible for evaluating the impact of any actual or potential security vulnerabilities. IBM periodically updates component records included in its product portfolio to address potential vulnerabilities. If IBM identifies previously unrecognized packages in its product/service inventory, it will address the related vulnerabilities regardless of the CVE date. The inclusion of an older CVE ID does not indicate that the vulnerability has been used by IBM since that date, nor does it indicate that IBM was aware of the vulnerability prior to that date. We strive to keep customers informed about the vulnerabilities we are aware of. Cross-Reference Information Product: IBM i Component: IBM i Platform: IBM i Version: 7.6.0, 7.5.0, 7.4.0, 7.3.0 Summary IBM i contains a severe privilege escalation vulnerability (CVE-2026-18669) affecting versions 7.3 through 7.6. IBM has released corresponding PTF fix versions and recommends that users upgrade as soon as possible to resolve this vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

IBM i Privilege Escalation Vulnerability CVE-2026-18669 Advisory and Fix