What’s Vulnerable › Vulnerabilities
CVE-2026-18515: IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-14 · updated 2026-09-16
- Weakness: CWE-22
Description
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to place files into the file system with Navigator for i when they should be blocked by Navigator configuration. This could allow attackers to upload files onto the system to places the Navigator support did not intend, but only if the profile could already do that by itself.
Affected products
- IBM i: 7.6, 7.5, 7.4, 7.3
References
Get alerted when CVE-2026-18515 or the next vulnerability affects your stack