CVE-2026-18869
IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]
Description
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands.
INFO
Published Date :
Sept. 18, 2026, 7:21 p.m.
Last Modified :
Sept. 18, 2026, 7:21 p.m.
Remotely Exploit :
Yes !
Source :
ibm
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | 9a959283-ebb5-44b6-b705-dcc2bbced522 |
Solution
- Apply the latest cumulative update for your IBM i version.
- Verify FTP server configuration settings.
- Restrict access to internal network services.
- Monitor network traffic for suspicious activity.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-18869 vulnerability anywhere in the article.