What is the CVSS score of EUVD-2026-57383?

EUVD-2026-57383 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.5%.

Which versions of IBM i are affected by EUVD-2026-57383?

IBM i systems running versions 7.3 through 7.6 are vulnerable to privilege escalation attacks where any low-privileged user can escalate to root access, resulting in complete system compromise…. A patch is available.

How to fix or mitigate EUVD-2026-57383?

Within 24 hours, identify all systems running IBM i 7.3 through 7.6 and categorize by criticality and connectivity. Within 7 days, obtain the vendor security patch from IBM, test in a non-production environment matching production configuration, and begin staged deployment starting with development and test systems. Complete patch deployment across all production IBM i systems within 30 days, with documented approval and rollback procedures; prioritize systems handling sensitive data or supporting critical business processes.

IBM i EUVD-2026-57383

| CVE-2026-18669 HIGH

Execution with Unnecessary Privileges (CWE-250)

2026-08-12 ibm

GHSA-g4wf-p98r-hh5q

Privilege Escalation RCE IBM

8.8

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network-accessible activation engine requires authenticated low-privilege session; root execution yields full CIA impact with no scope change to adjacent systems.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 12, 2026 - 18:38 vuln.today

CVE Published

Aug 12, 2026 - 17:32 nvd

HIGH 8.8

DescriptionCVE.org

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engine component. An authenticated attacker can execute a maliciously planted script with root authority.

AnalysisAI

Privilege escalation to root authority in IBM i 7.3 through 7.6 is achievable by any authenticated low-privileged user via a remote code execution flaw in the activation engine component. The activation engine executes with unnecessary system privileges (CWE-250), allowing a planted malicious script to run with root authority, resulting in full compromise of confidentiality, integrity, and availability. No public exploit code or CISA KEV listing has been identified at time of analysis, though the vendor has released a patch and the low attack complexity makes this a credible near-term threat for unpatched IBM i environments.

Technical ContextAI

IBM i (formerly AS/400 and iSeries) is IBM's proprietary integrated operating system running exclusively on IBM Power Systems hardware, widely deployed in enterprise and financial sector environments. The affected component is the activation engine, which handles the activation of licensed programs and software components on the platform. CWE-250 (Execution with Unnecessary Privileges) identifies the root cause: the activation engine invokes execution with root authority beyond what the operation requires, and an attacker can exploit this by planting a crafted script into the engine's execution path. The CPE string cpe:2.3:a:ibm:i:*:*:*:*:*:*:*:* covers all versioned releases of IBM i. The vulnerability creates a bridge from a low-privileged authenticated network session to full root-level system control - a classic privileged-execution-bypass pattern in integrated OS environments where activation subsystems traditionally run at elevated trust.

RemediationAI

Apply the IBM-released patch by consulting the official advisory at https://www.ibm.com/support/pages/node/7283278 to identify the specific PTF (Program Temporary Fix) or Technology Refresh required for each affected release (7.3, 7.4, 7.5, 7.6). The exact fix version is not specified in the available input data and must be confirmed directly from the advisory before deployment. As a compensating control prior to patching, restrict network access to the activation engine by configuring IBM i exit programs on the relevant network service entry points to block or audit invocations from unauthorized or low-privileged users - note this may disrupt legitimate software activation workflows and should be validated in a test environment first. Additionally, audit all low-privileged IBM i user profiles and remove unnecessary accounts to reduce the pool of accounts that could be leveraged for exploitation.