Vulnerability Details CVE-2026-18511
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the Native IBM i JSSE provider, caused by improper bounds checking during TLS session establishment. A local attacker could overflow a fixed-length buffer and execute arbitrary code on the system or cause the JVM process to crash.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 12.4%
CVSS Severity
CVSS v3 Score 7.3