CVE-2026-18341CWE-122CWE-191

CVE-2026-18341

Medium · published September 4, 2026

CVSS v3.1

6.3

EPSS

Percentile

15.0

In the wild

Unconfirmed

What it is

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow.

The record

Technical detail

CVSS v3.1: 6.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0: Not supplied
EPSS: 0.00246 · 15.0th percentile
Weaknesses: CWE-122 · Heap-based Buffer Overflow; CWE-191 · Integer Underflow (Wrap or Wraparound)
Published: 2026-09-04T21:16Z

Affected products (4)

References (1)

EPSS history

Timeline