What is CVE-2026-18887?

CVE-2026-18887 is a medium-severity vulnerability, classified under Information Disclosure. CVSS score: 6.5/10. Published 2026-09-04.

How severe is CVE-2026-18887?

Medium severity. CVSS v3 base score is 6.5 out of 10.

CVE-2026-18887

CVE-2026-18887

IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to obtain sensitive information in PASE. An attacker could exploit this vulnerability to access information about process they shouldn't be permitted to access.

Vulnerability class: Information Disclosure

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com

Frequently asked questions

What is CVE-2026-18887?: CVE-2026-18887 is a medium-severity vulnerability, classified under Information Disclosure. CVSS score: 6.5/10. Published 2026-09-04.
How severe is CVE-2026-18887?: Medium severity. CVSS v3 base score is 6.5 out of 10.