CVE-2026-18527criticalCWE-384

CVE-2026-18527: fallo crítico en IBM Administration Runtime Expert for i

IBM Application Runtime Expert (ARE) for IBM i is vulnerable to a user gaining elevated privileges and sensitive information [, ].

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Administration Runtime Expert for i

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.9epss 0.5%
IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticated profile gaining elevated privileges on the IBM i system.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Productos afectados
IBM · Administration Runtime Expert for i
CVEs relacionadas — IBM Administration Runtime Expert for i

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-17203HIGHIBM Application Runtime Expert (ARE) for IBM i is vulnerable to a user gaining elevated privileges and sensitive information [, ].EPSS 0.6%