CVE-2026-18671: CWE-190 Integer Overflow or Wraparound
IBM i versions 7.3 through 7.6 contain an integer overflow vulnerability in the NetServer component. An authenticated attacker could exploit this flaw to cause a server thread exception, resulting in a temporary denial of service. The vulnerability arises during bounds checking in request processing. The CVSS score is 6.5, indicating a medium severity impact.
AI Analysis
Technical Summary
CVE-2026-18671 is an integer overflow vulnerability (CWE-190) affecting IBM i versions 7.3, 7.4, 7.5, and 7.6. The flaw occurs in the NetServer server thread during bounds checking of requests, allowing an authenticated attacker to trigger a server thread exception. This exception can cause a temporary denial of service condition. The vulnerability requires network access and no user interaction, with low attack complexity and no privileges required beyond authentication. Confidentiality impact is low, integrity is not affected, and availability impact is low.
Potential Impact
Exploitation of this vulnerability can cause a temporary denial of service by forcing a NetServer server thread exception. There is no indication of data confidentiality or integrity compromise. The impact is limited to availability disruption.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Monitor IBM advisories for updates and apply patches promptly once available.
CVE-2026-18671: CWE-190 Integer Overflow or Wraparound
Description
IBM i versions 7.3 through 7.6 contain an integer overflow vulnerability in the NetServer component. An authenticated attacker could exploit this flaw to cause a server thread exception, resulting in a temporary denial of service. The vulnerability arises during bounds checking in request processing. The CVSS score is 6.5, indicating a medium severity impact.
CVSS v3.1
Score 6.5medium
Affected software
IBM
cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-18671 is an integer overflow vulnerability (CWE-190) affecting IBM i versions 7.3, 7.4, 7.5, and 7.6. The flaw occurs in the NetServer server thread during bounds checking of requests, allowing an authenticated attacker to trigger a server thread exception. This exception can cause a temporary denial of service condition. The vulnerability requires network access and no user interaction, with low attack complexity and no privileges required beyond authentication. Confidentiality impact is low, integrity is not affected, and availability impact is low.
Potential Impact
Exploitation of this vulnerability can cause a temporary denial of service by forcing a NetServer server thread exception. There is no indication of data confidentiality or integrity compromise. The impact is limited to availability disruption.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Monitor IBM advisories for updates and apply patches promptly once available.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- ibm
- Date Reserved
- 2026-08-03T15:15:04.146Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a7e2fb3bf8831d539cb5cdb
Added to database: 08/13/2026, 20:57:23 UTC
Last enriched: 08/21/2026, 13:48:24 UTC
Last updated: 09/26/2026, 01:47:40 UTC
Views: 58
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.