CVE-2026-18527

9.9 Critique

Publiée le 29/08/2026 à 00:16 · Modifiée le 31/08/2026 à 21:17 · En attente d'analyse NVD · Source : psirt@us.ibm.com

Description

IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticated profile gaining elevated privileges on the IBM i system.

Traduire en français

Produits concernés

IBM Administration Runtime Expert for i

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.9 Critique	psirt@us.ibm.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-384

Références

https://www.ibm.com/support/pages/node/7284580

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories