CVE-2026-18515

MEDIUM Status: Received

CVSS Scores

CVSS v3.x Base Score
4.3
MEDIUM

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to place files into the file system with Navigator for i when they should be blocked by Navigator configuration. This could allow attackers to upload files onto the system to places the Navigator support did not intend, but only if the profile could already do that by itself.

Published
September 14, 2026 7:17 PM
Last Modified
September 14, 2026 7:17 PM
Source
[email protected]

Weaknesses (CWE)

CWE-22

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.