AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-18527

IBM Administration Runtime Expert for i: privilege escalation

IBM

CVE-2026-18527 · Published Aug 28, 2026 · updated Aug 31, 2026

Critical9.9
No fix yet
IBM advisory

IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticated profile gaining elevated privileges on the IBM i system.

Affected versions

PackageAffectedFixed in
Administration Runtime Expert for i
Product
<= 1R1M0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-384

More IBM advisories

All IBM
Critical 9.1Aug 28IBM Concert: SQL injectionCVE-2026-3627no fix yetMedium 6.2Aug 28IBM Cloud Pak for Data System: denial of serviceCVE-2026-3686no fix yetHigh 7.5Aug 28IBM Langflow OSS: path traversalCVE-2026-18899no fix yetHigh 8.2Aug 28IBM Langflow OSS: information disclosureCVE-2026-18904no fix yetCritical 9.8Aug 28IBM Langflow OSS: remote code executionCVE-2026-19286no fix yetMedium 6.4Aug 28IBM Langflow OSS: improper authorizationCVE-2026-19294no fix yet