What is the CVSS score of CVE-2026-18175?

CVE-2026-18175 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.2%.

Which versions of IBM i are affected by CVE-2026-18175?

IBM i systems running versions 7.3 through 7.6 with Distributed Data Management (DDM) services are vulnerable to remote, unauthenticated database transaction manipulation attacks on internet-facing…. A patch is available.

How to fix or mitigate CVE-2026-18175?

Within 24 hours, identify all IBM i 7.3, 7.4, 7.5, and 7.6 systems with DDM services enabled and their network accessibility; implement temporary firewall restrictions to limit DDM access to trusted hosts only. Within 7 days, obtain the patch from IBM's support portal and apply it to all affected systems, prioritizing production environments. Within 30 days, verify successful patch deployment across all systems, audit transaction logs for suspicious activity prior to patching, and configure ongoing monitoring of DDM transaction requests to detect future anomalies.

IBM i CVE-2026-18175

EUVD-2026-71458 HIGH

Improper Authorization (CWE-285)

2026-09-04 ibm

GHSA-3xfq-jhw7-3qgh

Authentication Bypass IBM

7.5

CVSS 3.1 · NVD

Severity by source

Vendor (ibm) PRIMARY

HIGH

qualitative

NVD

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

vuln.today AI

8.1 HIGH

Network-accessible DDM service requires no credentials; AC:H reflects undisclosed protocol/configuration conditions; S:C because database impact extends beyond the DDM dispatcher component.

3.1 AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L

4.0 AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:H/SA:N

Primary rating from Vendor (ibm).

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

CVSS changed

Sep 08, 2026 - 19:53 NVD

8.1 (HIGH) 7.5 (HIGH)

Analysis Generated

Sep 04, 2026 - 17:08 vuln.today

CVE Published

Sep 04, 2026 - 16:26 cve.org

HIGH 8.1

DescriptionNVD

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due to improper authorization in the DDM target dispatcher.

AnalysisAI

Improper authorization in the DDM (Distributed Data Management) target dispatcher on IBM i 7.3 through 7.6 allows remote, unauthenticated attackers to manipulate database transactions across the network. The CVSS vector (AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L) confirms the path is fully network-exposed with no credential requirement, though high attack complexity suggests specific conditions - such as DDM service availability and potentially specific network positioning - must be met. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	The DDM service (Distributed Data Management target dispatcher) must be enabled and network-accessible on the target IBM i system - DDM is not always enabled by default and is typically used in IBM i-to-IBM i distributed database scenarios. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 8.1 score with S:C reflects that the vulnerability spans beyond the DDM dispatcher itself into database resources, and I:H confirms significant integrity impact - unauthorized modification of enterprise database transactions. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Apply the vendor-released patch documented in IBM Security Bulletin at https://www.ibm.com/support/pages/node/7286186 - consult that page for the specific PTF (Program Temporary Fix) numbers applicable to each IBM i release (7.3, 7.4, 7.5, 7.6). … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify all IBM i 7.3, 7.4, 7.5, and 7.6 systems with DDM services enabled and their network accessibility; implement temporary firewall restrictions to limit DDM access to trusted hosts only. …

Threat intelligence, references, and detailed analysis are available after sign-in.