CVE-2026-18175: CWE-285 Improper Authorization

This vulnerability (CVE-2026-18175) in IBM i versions 7.3 through 7.6 is due to improper authorization controls in the DDM target dispatcher component. A remote attacker without privileges could exploit this flaw to manipulate database transactions, potentially leading to unauthorized data modification and partial denial of service. The CVSS vector indicates the attack requires high attack complexity and no privileges or user interaction, with a scope change and impacts on confidentiality (low), integrity (high), and availability (low).

Successful exploitation could allow an unauthenticated remote attacker to manipulate database transactions, compromising data integrity and causing partial service disruption. Confidentiality impact is low, but integrity impact is high, meaning unauthorized changes to data are the primary concern. Availability impact is low, indicating limited disruption to service availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Users of affected IBM i versions should monitor IBM security advisories for updates and apply any official fixes once released.