AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-18102

IBM i: integer overflow

IBM

CVE-2026-18102 · Published Aug 19, 2026 · updated Aug 24, 2026

Low3.5
No fix yet
IBM advisory

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking.

Affected versions

PackageAffectedFixed in
i
Product
<= 7.6No fix yet
<= 7.5No fix yet
<= 7.4No fix yet
<= 7.3No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-122

More IBM advisories

All IBM
High 7.4Aug 19IBM DS8A00 (R10.0 - R10.1): information disclosureCVE-2025-36254no fix yetHigh 7.5Aug 19IBM DS8A00: authenticated user could create a user with privileged userCVE-2025-36255no fix yetMedium 5.4Aug 19IBM DS8A00: authenticated user could read or modify another user'sCVE-2025-36398no fix yetMedium 5.1Aug 19IBM PowerVM Hypervisor Platform KeyStoreCVE-2026-4936no fix yetMedium 5.3Aug 19IBM PowerVM Hypervisor: local attacker could decrypt encrypted dataCVE-2026-4937no fix yetMedium 5.5Aug 19IBM go-slug: local attacker could bypassCVE-2026-14978no fix yet